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PREFACE 


The  "Lightning  Effects  on  Future  Aircraft  Electronic  Systems”  workshop, 

November  4-6,  1981,  sponsored  by  the  NASA-Langley  Research  Center  in 
conjunction  with  the  Federal  Aviation  Administration  (FAA)  Technical  Center, 
provided  an  ideal  vehicle  for  information  exchange.  This  workshop  provided 
regional  and  headquarters  personnel  with  an  insight  into  the  magnitude  of  the 
problem,  and  the  progress  being  accomplished  through  existing  and  future 
FAA  programs. 

protection  of  electrical  and  electronic  subsystems  and  equipments  against 
the  atmospheric  electricity  hazards  constituted  by  lightning  and  static 
electricity  must  be  taken  into  special  account  in  the  design  of  advanced 
technology  aircraft.  Two  primary  factors  have  contributed  to  an  increased 
potential  hazard  to  new  generation  aircraft:  (1)  The  increasingly  widespread 
use  of  digital  microelectronic  subsystems  and/or  avionic  equipment  which  are 
inherently  susceptible  to  upset  and  damage  caused  by  electrical  transients 
to  implement  flight  and  mission  critical  functions;  and  (2)  the  reduced 
electromagnetic  shielding  provided  by  many  advanced  structural  materials. 

Present  military  and  civil  design  guides  and  standards  are  being  reviewed  to 
assure  adequate  protection  for  new  generation  aircraft. 

The  NASA-Langley  Research  Center  Electronic  System  Branch  of  the  Flight 
Electronic  Division  was  the  host  for  this  workshop;  which  is  a  major  element 
in  the  FAA  Technical  Center's  Advanced  Integrated  Flight  Systems  (AIFS) 
program.  The  AIFS  program  objectives  are  to  acquire  and  disseminate  data, 
enhance  communications,  and  provide  Aviation  Standards,  lead  and/or  certify 
regions  airworthiness/certification  personnel  with  a  vehicle  for  information 
transfer  in  this  highly  technological  area  of  lightning  research  as  related 
to  aircraft  flight  safety. 

The  personnel  from  the  NASA-Langley  Research  Center  Aircraft  Electronic  System 
Branch  and  their  associates  exhibited  professionalism  in  the  planning,  assembling 


the  technical  experts  and  material,  and  conducting  this  workshop.  It  is  with 
a  deep  and  sincere  sense  of  gratitude  that  we  of  the  FAA  would  like  to  extend 
our  aDnreciatlon  to  those  nersons  for  a  Inh  well  Hone. 
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LIGHTNING  EFFECTS  RESEARCH  PROGRAM 

by 

Mr.  Felix  Pitts 

Langley  Research  Center 
National  Aeronautics  and  Space  Administration 

The  current  research  program  being  pursued  at  the  Langley 
Research  Center  on  lightning  and  its  effects  on  digital 
electronic  systems  will  be  presented. 


LIGHTNING  EFFECTS 


•  CURRENT  TRANSPORT  AIRCRAFT  STRUCK  ABOUT  ONCE  PER  YEAR 

-  ALUMINUM  .SKIN 

-  HYDRAULIC/MECHANICAL  PRIMARY  CONTROLS 

-  MOSTLY  NUISANCE  PROBLEMS  CAUSED  BY  LIGHTNING 


•  FUTURE  AIRCRAFT  WILL  EMPLOY 

-  COMPOSITE  STRUCTURE 

-  DIGITAL  AVIONICS/ELECTRONIC  CONTROLS 

SUSCEPTIBLE  TO  DISTURBANCE 
POTENTIAL  FOR  UPSET 


•  ■  NEED  FOR  FUTURE  AIRCRAFT  DESIGNS 

-  BETTER  UNDERSTANDING  OF  IN-FLIGHT  LIGHTNING  ENVIRONMENT 

-  TECHNIQUES  FOR  ASSESSING  DIGITAL  SYSTEM  PERFORMANCE  IN 
LIGHTNING  ENVIRONMENT 


LIGHTNING  EFFECTS  RESEARCH  PROGRAM 
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LIGHTNING  PHENOMENOLOGY 


by 


Dr.  M.  LeVine 


Goddard  Space  Flight  Center 
National  Aeronautics  and  Space  Administration 


State-of-the-art  of  lightning  knowledge:  Theories  of 
charge  generation,  the  lightning  discharge,  stepped 
leaders,  return  strokes,  fundamental  electromagnetics 
of  lightning,  statistical  distribution  of  lightning 
characterist ics . 
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DISTRIBUTION  OF  CHAR6E  IN  A  THUNDERCLOUD 


FIELD  CHANGE  SYSTEM 
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FLIGHT  EXPERIMENT  DEFINITION  AND  SUMMARY 


by 

Mr.  Felix  Pitts 


Langley  Research  Center 
National  Aeronautics  and  Space  Administration 

Description  of  NASA  F-106B  in-flight  direct  strike  measure¬ 
ment  program.  Electromagnetic  measurements,  instrumentation 
concept,  and  results  summary. 


MEASUREMENTS  SUMMARY 


MEASUREMENT 

SYMBOL 

AMPLITUDE 

RANGE 

SENSOR  TYPE 

RATE  OF  CHANGE  OF 

ELECTRIC  FLUX  DENSITY 

D 

50  A/m2 

FLUSH  PLATE 

DIPOLE 

RATE  OF  CHANGE  OF 

MAGNETIC  FLUX  DENSITY 

B 

2  X  104  TESLA/SEC 

MULTI6AP 

LOOP 

RATE  OF  CHANGE  OF 

CURRENT 

i 

1011  A/SEC 

INDUCTIVE 

CURRENT  PROBE 

MEASUREMENTS  SUMMARY 


MEASUREMENT 

SYMBOL 

DIMENSION 

SENSOR  TYPE 

RATE  OF  CHANGE  OF 
ELECTRIC  FLUX  DENSITY 

t 

A/M2 

FLUSH  PLATE 

DIPOLE 

RATE  OF  CHANGE  OF 
MAGNETIC  FLUX  DENSITY 

6 

TESLA/SEC 

MULTIGAP 

LOOP 

RATE  OF  CHANGE  OF 

CURRENT 

i 

A/SEC 

INDUCTIVE 

CURRENT-PROBE 

ELECTRIC  FIELD 

E 

V/M 

FIELD  MILL 

CURRENT 

I 

A 

CURRENT  TRANSFORMER 

21 


MEASUREMENT  LOCATIONS  -  1980 


ALTITUDE 


1 


INSTRUMENTATION  SYSTEM 


•  I 


MSTRUMENTAHON 

RECORDER 


LIGHTNING  RESULTS 


Mg.  1J  l-dot  sentor  (Might  #80-038).  Hg.  l«  B-8ot  ttnsor  (Might  #80-038).  fl?i  I5  t«ntor  (flight  #80-038). 


DATA  SUMMARY 


w 


o  1980 

-  19  FLIGHTS  69  STORM  PENETRATIONS 

-  10  STRIKES  17  TRANSIENTS:  (7  (),  5  ft,  6  t) 

-  RESULTS  REPORTED: 

NASA  TM  81996  ”1930  DIRECT  STRIKE  LIGHTNING  DATA” 

A1AA  81-0083  "E/M  MEASUREMENT  OF  DIRECT  LIGHTNING  STRIKES  TO  A/C" 

o  1931 

-  29  FLIGHTS  111  STORM  PENETRATIONS 

-  10  STRIKES  27  TRANSIENTS 

1  BOOM  CURRENT  (BOEING) 

16  L  10  6  (DISTANT) 

o  MAXIMUM  MEASURED  VALUES 

f>  30.5  A/m2  - >  390  KV/0,1  ns 

g  1160  T/s - 2  KA/0.1  „s 

I  15  KA 


OTHER  F-106  LIGHTNING  EXPERIMENTS 


•  ATMOSPHERIC  CHEMISTRY  EXPERIMENTS  -  LaRC 

1980  -  SHOWED  N20  ENHANCEMENT  NEAR  LIGHTNING 

1981  -  SHOWED  CO  ENHANCEMENT  NEAR  LIGHTNING 

•  X-RAY  EXPERIMENT  -  U.  WASHINGTON 

1980  -  SHOWED  INCREASED  COUNT  NEAR  LIGHTNING 

1981  -  BEING  EVALUATED 

•  OPTICAL  SIGNATURE  EXPERIMENT  -  NSSL 

-  PROTOTYPE  FOR  ORBITAL  LIGHTNING  MAPPER 

-  RESULTS  BEING  ANALYZED  AT  NSSL 
a  STORM  SCOPE 

-  TURBULENCE/LIGHTNING  DO  NOT  ALWAYS  CORRELATE 

-  LIGHTNING  LOCATIONS  DISPLAYED  TEND  TO  BE  FURTHER  FROM 
AIRCRAFT  POSITION  THAN  RADAR  CONTOURS  (BUT  AT  SAME  BEARING) 

a  BOEING  DATA  LOGGER 

-  FIRST  BOOM  CURRENT  RECORDED  AUGUST  1981 
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DATA  SYSTEM  DESCRIPTION 


by 


Mr.  Mitchel  E.  Thomas 


Langley  Research  Center 
National  Aeronautics  and  Space  Administration 


The  research  data-gather ing  system  on  the  F-106B  aircraft 
developed  for  in-flight  measurement  of  direct  and  nearby 
lightning  strike  characteristics  is  described.  Details  of 
the  design  and  performance  are  presented  for  system  com¬ 
ponents  including  the  digital  transient  recorders,  wideband 
analog  recorder,  fiber  optic  control  and  diagnostic  links, 
power  system  isolation,  and  system  shielding. 
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LIGHTNING  INSTRUMENTATION  SYSTEM 


•  HIDE  BANDWIDTH  FOR  SUBMICROSECOND  SIGNAL  RESOLUTION 

-  10  ns  SAMPLE  INTERVAL 

•  CONTINUOUS  RECORDS  FOR  DEFINITION  OF  FULL  LIGHTNING  SCENARIO 

-  15  MHz  ANALOG  BANDWIDTH 

•  PROTECT  AGAINST  SPURIOUS  RESPONSES  (EMI) 

-  SHIELDED  ENCLOSURE 

-  MOTOR-GENERATOR  POWER  ISOLATION 

-  FIBER  OPTIC  CONTROL 

•  AUTOMATIC  OPERATION 


LIGHTNING  INSTRUMENTATION  SYSTEM 


30 


TRANSIENT  RECORDER 


analoc; 

OUTPUTS 


DIGITAL 

OUTPUTS 


EXPANDED  TRANSIENT  WAVEFORM  RECORDER  FEATURES 

I  6-BIT  AMPLITUDE  RESOLUTION  (1.56%) 

•  FREQUENCY  RESPONSE  -  DC  TO  50  MHz 

•  131072  (217)  DATA  WORD  CAPACITY 

•  SAMPLE  RATES  UP  TO  100  MHz 

9  DATA  WINDOW  LENGTH  OF  1310  MICROSECONDS  AT  100  MHz 

•  INTERNAL  OR  EXTERNAL  TRIGGERING 

•  DATA  WINDOW  SELECTION  WHICH  IS  BEFORE,  DURING,  OR 
AFTER  TRIGGER  EVENT 
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WIDEBAND  ANALOG  RECORDER 


•  VIDEO  RECORD  TECHNIQUES 

«  FREQUENCY  MODULATED  CARRIER 

•  10  Hz  TO  15  MHz  BANDWIDTH 

•  12  MINUTES  RECORD  TIME 


•  2  CHANNELS  &  2  AUXILIARY 


LOGARITHMIC  AMPLIFIER 


3 

1 


COMPRESSION  AMPLIFIER 


•  15  MHz  BANDWIDTH 

•  DIFFERENTIAL  INPUT,  50  OHM  IMPEDANCE 
.  E0  -  1  ♦  .3  LOG  Ejn 

•  60  dB  DYNAMIC  RANGE 


SIMPLIFIED  SHIELDING  TOPOLOGY 

AIRCRAFT 
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LIGHTNING  INSTRUMENTATION  CONTROL 


FIBER 

OPTIC 

CABLES 


TRANSIENT 

RECORDER 


TRANSIENT 

RECORDER 

MAGNETIC 

TAPE 

RECORDER 


X  10’ 
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FORWARD  -  VIEWING  CAMERA  REARWARD  -  VIEWING  CAMERA 


ELECTROMAGNETIC  SENSORS  FOR  AIRCRAFT  LIGHTNING  RESEARCH 


by 


Mr.  Klaus  P.  Zaepfel 


Langley  Research  Center 
National  Aeronautics  and  Space  Administration 


Electromagnetic  sensors  designed  for  measuring  EM  fields 
and  currents  during  lightning  strikes  to  the  F-106B  research 
aircraft  are  described.  Sensor  theoretical  basis,  perform¬ 
ance,  and  parallel-plate  transmission  line  used  to  check  and 
calibrate  these  sensors  are  described. 
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MEASUREMENT  REQUIREMENTS 


MEASUREMENT 

FIELD  CHANGE 

JT 

50A/m2  (AE  ~  6  x  105  per  0.  lps) 

>  100V 

B 

2  x  104  Tesla/s 

>  100V 

• 

I 

10kA  per  0.  lps 

>  100V 

SENSOR  CHARACTERISTICS 

•  DESIGN  PRINCIPLES  DEVELOPED  BY  AIR  FORCE  WEAPONS  LAB  FOR  NEMP 

•  WIDE  BANDWIDTH:  2:80MHz  (tR  <4.4  ns) 

•  SIMPLE  GEOMETRY:  CALIBRATION  BY  RUIER 

•  APPROXIMATELY  LOO  V  OUTPUT  FOR  FULL-SCALE  DIRECT  STRIKE 
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DEFINITIONS:  ELECTRIC  FIELDS 


D ,  C/r»l 

(  Electric  Flu*  Density) 
ft  ,  C/m1 

C Surface.  Charge  Density) 
For  flat  plate,  D-  p$ 

D=  €.  E  wktre.  €.  i» 

^eYnt'ittivitv  of  dicJtctric 


ft 


Ic • CORONA 

CURRENT 


Xi*  D-Aroa*  DISflACf  MENT 
CURRENT 


\Fp 

>  If  TOTAL  CURRENT 


No  Corona  ,  If  D-Aren 

In  Corona  (  If  (jf-  6)Area 
•  i(Area 


SENSOR  FUNDAMENTALS 


NO  CORONA  CORONA 

D»£E 

If  If  D- AREA  It»(jctD)AREA 

VOUT  *  R  I  ^ 
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B-  DOT  S«A»*f 


dtJA2i»r 


*-Mi,  M,#/Ar''1A  X-DOT  Sensor 


I-DOT  SENSOR 


FLAT-PLATE  TRANSMISSION  LINE  CALIBRATOR 


SAMPLING  INTEGRATOR  DISPLAY 
OSCILLOSCOPE  OSCILLOSCOPE 


SUMMARY  OF  SENSOR  PARAMETERS 


SENSOR 

LOCATION 

DESIGN 

SENSITIVITY 

RISETIME 

(10%-90%) 

JT 

FUSELAGE/TAIL 

CIRCULAR 

4.1x10  "^m2 

2.4  ns 

JT 

WINGS 

RECTANGULAR 

-2  2 
2.7x10  m 

3.0  ns 

B-DOT 

FUSELAGE 

2  GAPS,  4  LOAD  POINTS 

5.7xl0"3m2 

.85  ns 

B-DOT 

WINGS 

1  GAP,  1  LOAD  POINT 

-3  2 
5.5x10  nr 

2.0  ns 

1  -DOT 

RADOME 

1  GAP.  4  LOAD  POINTS 

2.  1x10_9H 

0.8  ns 

FIELD  MILLS 


»  4 

INCHES 


LIGHTNING  MODELING 


by 


Dr.  M.  LeVine 


Goddard  Space  Flight  Center 
National  Aeronautics  and  Space  Administration 


The  ground-based  lightning  measurements  made  at  Wallops 
Flight  Center  concurrently  with  the  in-flight  direct  strike 
measurements  are  described.  Lightning  mathematical  model 
development  to  arrive  at  credible  lightning  models  for  use 
in  induced  effects  electromagnetic  coupling  studies  is 
discussed. 
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INTERPRETATION  OF  IN-FLIGHT  TEST  DATA  APPROACH, 
PROBLEMS,  AND  OUTLOOK 


by 

Dr.  R.  A.  Perala 


Electromagnetic  Applications,  Incorporated 

Discussion  of  the  direct  strike  data  interpretation  pro¬ 
blem  and  issues  to  be  resolved.  Review  of  lightning/aircraft 
interaction  process  and  aircraft  electrical  resonance  con¬ 
siderations.  Approach  for  generalization  of  F-106  data  to 
other  aircraft  classes. 
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•  lilt  LIGHINING/AIRIKAI I  INILRAll  ION  I’WMiSS 

•  THE  NEED  FOR  IN-FLIGHT  TEST  DATA 

I  EXTENSION  OF  DATA  TO  OTHER  AIRCRAFT 

•  LIGHTNING  MODELING 

•  AIRCRAFT  MODELING 

•  EXAMPLES 


Stepped  leader  attachhent  and  continued  Ho  return  stroke  through  the  aircraft 

PROPAGATION  FROM  AN  AIRCRAFT 


LIGHTNING/AIRCRAFT  INTERACTION  DESCRIPTION 


r 


f 


i. 


AIRCRAFT  IN  LARGF  STATIC  FLFCTRIC  F  IFI  l>,  10- 100  kV/M  IYPICAI 
AIRCRAIl  TUOIIAHLY  ALKI'ADY  CIIARl.ll>  IlY  I  R 1 IUH  I  I  I  I  U  1 1  1 1  A  I  I  UN 
APPROACHING  STEPPED  LEADER  GIVES  LARGE  E,  af/.it 
WHEN  E  LARGE  ENOUGH.,  AIRCRAFT  STREAKERS 
STREAKER  ATTACHES  TO  APPROACHING  LEADER 

CHARGE  FROK  LEADER  DEPOSITED  ON  AIRCRAFT  AND  ELEVATES  ITS  POTENTIAL 

WHEN  ITS  POTENTIAL  IS  HIGH  ENOUGH,  LEADER  CONTINUES  FROK  AIRCRAFT 
TO  DESTINATION 

STEPPED  LEADER  CURRENT  FLOWS  THROUGH  AIRCRAFT  UNTIL  RETURN  STROKE 
RETURN  STROKE  CURRENT  LOWERS  AIRCRAFT  POTENTIAL 
AIRCRAFT  IN  CORONA  DURING  MUCH  OF  THIS  TIME 


APPROACHING  LEADER  E  FIELDS 


HEIGHT  ABOVE  GROUND  M 

Electric  gradient  below  leader  channel:  (•)  as  function 

OF  HORIZONTAL  DISTANCE  AND  (•>)  AS  FUNCTION  OF  HEIGHT  OF 
LEADER  TIP  ABOVE  GROUND 

A5SUME  and  •  1.5  x  10®  m/tec 

*  1.2  x  I07  at  1000  m 


HE  GET  II 


1.5  x  I010  at  10-20  m 


AIRCRAFT  STREAMERS 


I  CURRENTS  PROBABLY  LESS  THAN  100A,  BASED  ON  GROUND  STREAMER  DATA 

•  WAVESHAPES:  10  v«c  R I  SET  I  ME  S 

•  NEGATIVE  CHARGE  ENTERING  AIRCRAFT  AT  STREAMER  POINT 

•  STREAMERS  CAN  OCCUR  FROM  CRITICAL  POINTS 
I  STREAMERS  INFLUENCED  BY  STATIC  FIELD 

I  ELECTRIC  FIELD  ON  AIRCRAFT  REVERSES  AT  ATTACHMENT 

STEPPED  LEADER  CURRENT 
FLOW  THROUGH  AIRCRAFT 

I  AIRCRAFT  NEEDS  TO  ACCUMULATE  >100  vC  OF  CHARGE  FOR  STEPPED  LEADER  TO 
CONTINUE  ON  FROM  AIRCRAFT 

I  IF  LEADER  CURRENT  IS  1000A  RISING  IN  100  ns,  CHARGING  TIME  IS  ABOUT  150  "s 
I  DURING  THIS  TIME  AIRCRAFT  NORMAL  ELECTRIC  FIELDS  APPROACH  3  MV/* 

I  THIS  GIVES  3E/3t  «2  x  1013  V/m/sec 

I  LEADER  CURRENT  CONTINUES  THROUGH  AIRCRAFT  AND  ELECTRIC  FIELD  STAYS 
CONSTANT  AND  CURRENT  ASSUMES  THE  SLOWLY  INCREASING  ARC  CURRENT  UPON 
WHICH  IS  SUPERIMPOSED  LEADER  PULSE  CURRENTS 

•  AIRCRAFT  IS  IN  CORONA  DURING  THIS  PHASE 
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ISSULS  or  INURt jI  and 

THE  NEED  FOR  IN-FLIGHT  TEST  DAI  A 

I  Attachmfnt  Process 

•  Hiiat  are  i  and  ? 

•  How  IMF'UR  I  AN  I  ARE  NONLINEAR  (lllKHNA,  SIRIAMIK-.'  I  I  I  I  <  I 

•  Hum  is  the  eouivalcni  circuit  hi  i hi  iiaihr  uhannll  ihcii'anii, 

NORTON  CURRENT  SOURCE) 

I  Return  Stroke 

•  What  are  e  and  }|  ? 

«  What  are  h  and  ^  ? 

«  How  IMPORTANT  ARE  NONLINEAR  EFFECTS? 

•  What  is  the  return  stroke  equivalent  circuit? 

I  Nearby  Lightning;  How  important  is  it? 

I  How  Applicable  are  State  of  the  Art  Lightning  Models  at  Aircraft  Altitu::?' 

•  Models  so  far  are  Based  on  Terrestrial  Observations 

»  flODELS  HAVE  NOT  BEEN  TESTED  AT  AIRCRAFT  ALTITUDES 

I  Obtain  Data  on  Intracloud  Lightning 

I  How  Does  the  Aircraft  Interact  with  Lightning?  Is  the  Lightning  Env  •' 
Itself  Hodeified  by  the  Presence  of  an  Aircraft?  Is  it  Different  f,>r 
Different  Aircraft, 


THE  OBJECTIVE  OF  DATA  INTERPRETATION 

I  What  are  the  lightnings  that  cause  the  F106B  responses? 

(an  inverse  problem) 

I  What  would  be  the  response  of  a  different  aircraft? 

I  Can  a  methodology  be  developed  for  extending  in-flight  data 

FROM  ANY  AIRCRAFT  TO  ANY  OTHER  AIRCRAFT? 
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APPROACH 
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FI 06  Crnd.Teet 
Decs  (Scale  Mo¬ 
deling  full  sr 


I 


Compute  Near 

* 

Nearby  Case 

Near 

Attached 

Fields  Para- 

Parameter 

Field 

Stroke 

r* 

neter  Study 

r* 

Study 

Data 

Data 

i 

i 

i 

1 

1 

1 

| 

i 

J  Modifications 

1 

| 

Compare 
Measured  & 
Predicted 

Channel 

Linear  Atto- 

Models 

- -► 

t 

;hed  Stroke 
Modeling 

j _ Identification  of  Important  Parameters 

_  Significance  of  Nonlinearities 

—  Applicability  of  Present  Lightning  Models 
-  Identification  of  Extrapolation  Methodology 
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IMPORTANCE  OF  NEAR  MISS  DATA 


I  Interaction  Calculations  Can  Be  Done  Linearly,  Without 
Complications  Introduced  By  Nonlinearities 


I  Data  Can  Be  Used  To  Infer  Nearby  Lightning  Electromagnetic 
Waveforms  At  Aircraft  Altitudes  To  Correlate  With  Predictions 


CURRENT  (kA) 


I 


Height,  i 


■•-Unilorm 

Current 


Slope  *  v 


breakdown 

pulse 

current 


t2  *3  t4  01,  t2  15  t4 

Current  Distribution  for  the  Model  of  Lin  et  al.  (1980)  in  which  the 
Breakdown  Pulse  Current  is  Constant  with  Height.  The  Constant  Velocity 
of  the  Breakdown  Pulse  Current  is  v.  Current  Profiles  are  Shown  at  Four 
Different  Times  t,THR  ugh  t4  ,  When  the  Return  Stroke  Wavefront  and  the 
Breakdown  Pulse  Current  are  at  Four  Different  Heights  t)  Through  i4  , 
Respectively.  (From  Oman) 


-  total  current 

- corona  current 

— - uniform  current 

.  pulee  current 


X 


c.  ' 

- - 1— — 

u  10 

20  30  40  50  60  70  80 

TIME  (psec) 

go 

100 

r . 

Return  Stroke  Current  Components  at  Ground  for  a 
Typical  Subsequent  Stroke  Calculated  from  Measured 
Electric  and  Magnetic  Fields  (From  Uman) 

i 

t  1 i 
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Calculated  Vertical  Electric  Fields  for  a  Typical  Subsequent  Return  Stroke  (From  Uman) 


Calculated  Horizontal  Electric  Fields  for  a  Typical  Subsequent  Return  Stroke  (From  Uman) 
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3-D  Finite  Difference  Equations  in  Rectangular 
Coordinates  Set  Up  with  Externally  Supplied  H  Fields 
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CORONA  AND  STREAMER  EFFECTS 


by 

Dr.  R.  A.  Perala 


Electromagnetic  Applications,  Incorporated 

Description  of  possible  corona  effects  on  direct  strike  data, 
review  of  elements  and  state-of-the-art  of  corona  modeling, 
and  application  of  corona  modeling  to  lightning/aircraft  inter¬ 
action.  Corona  to  arc  transition,  importance,  and  modeling  of 
streamers. 
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ELECTRON  AND  ION  LOSS  MECHANISMS 

•  Electron  attachment  to  neutral  air  molecules  to  form  negative  ions 

ATTACHMENT  RATE  a 

E 

I  Recombination  of  positive  ions  and  electrons  to  form  neutral  particles 

RECOMBINATION  RATE  » 

I  Recombinazion  of  positive  and  negative  ions 

RECOMBINATION  RATE  Y 


AIR  CHEMISTRY  EQUATIONS  FOR  CORONA 


d%(t)  +  [Bn  ♦  (t)  ♦  a  -  G]  n_(t)  *  Q(t), 
dt 

dn-(t)  ♦  C-rn  ♦  <t)  J  n  (t)  *  a.  n  (t) . 
dt  -  e  e 

dn  +  ( t )  ♦  [  6 n e ( t )  +  ->■"_(  t )  ]  «  Q  ( t )  ♦  G  n#  ( t ) . 
31 


AIR  CONDUCTIVITY  o  =  d  (%  ng  ♦  v<  (".  ♦  «*) 

I  Conductivity  °  Feeds  Back  Into  Maxwell's  Equations 
7  *  E  ■  ft 

V  X  H  *  c||  ♦  of 

I  Coefficients  g,  „e,  ue  in  Turn  Depend  Upon  e 
•  Coefficients  Also  Depend  Upon  Humidity  and  Air  Pressure 
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If  we  assume  space  charge  neutrality 

",  =  %  *  " 

However,  space  charge  effects  are  important  for  corona,  so  we  need  to  includl 

v  T  +  ifi.  s  n 

V  .  u  n  u 

p  =  ne)  R 

J  =  (n+  V+  -  n_V_  -  ng  V g )  q 

Also  need  to  include  particle  dynamics 

fs  =  qs  (I  +  vs  x  b),  s  Refers  to  species 


RESULTS  FOR  A  ROD-PLANE  GAP. 

NUMERICAL  RESULTS  ASSUME  SPACE  CHARGE  NEUTRALITY. 


EFFECTS  OF  NONLINEARITIES 


I  Air  conductivity  may  shield  apertures'-. 

a  r 

I  Air  breakdown  may  cause  increases  in  ,  for  example,  as 

INDICATED  ON  A  PREVIOUS  SLIDE 

I  Aircraft  complex  resonant  frequencies  may  change  because  corona 

AND  STREAMERS  EFFECTIVELY  EXTEND  AIRCRAFT  DIMENSIONS 


STREAMERS 

I  Based  on  ground  measurements,  amplitudes  limited  to  -100  A 

I  No  MODEL  BASED  ON  FIRST  PRINCIPLES  IS  KNOWN  TO  EXIST  FOR  STREAMER 

FORMATION  AND  PROPAGATION 

I  At  PRESENT,  MODELING  IS  PROBABLY  BEST  ACCOMPLISHED  BY  PRESCRIBING 
NONLINEAR  CURRENT  SOURCE  REPRESENTATIONS 
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AN  ANALYSIS  METHOD  FOR  THE  F-106  DIRECT  STRIKE  DATA 


by 


Dr.  T.  F.  Trost 


Texas  Tech  University 


Summary  of  characteristics  of  electric  and  magnetic  fields 
and  currents  measured  during  strikes.  Description  of 
laboratory  modeling  of  direct  strike  fields  and  currents 
including  test  apparatus,  airplane  model,  and  data  acquisi¬ 
tion  system.  Comparison  of  model  results  with  in-flight  data: 
Resonances,  attachment  points,  and  waveforms.  First  order 
interpretation  of  in-flight  data  as  a  lightning  input-aircraft 
response  problem. 
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F-106  DIRECT  STRIKE  DATA 
OBJECTIVES 

I.  MEASURE  STRENGTHS  AND  WAVEFORMS  OF  ELECTRIC  AND  MAGNETIC 
FIELDS  ON  AIRCRAFT 

II.  INTERPRET  WAVEFORMS 

A.  DETERMINE  WHICH  CHARACTERISTICS  OF  WAVEFORMS  ARE 
DUE  TO  ELECTROMAGNETIC  MODES  OF  AIRCRAFT/CHANNEL 

B.  INFER  NATURE  OF  IONIZATION  PROCESSES 

C.  STATE  IMPLICATIONS  OF  MEASURED  WAVEFORMS  REGARDING 
COUPLING  TO  INTERIOR 


APPARATUS  FOR 
AIRCRAFT-LIGHTNING  MODELING 
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TRANSFER  FUNCTIONS 
FOR  THE  F-106  MODEL 


FREQUENCY  DOMAIN  DESCRIPTION 

TRANSFER  FOURIER  TRANSFORM  OF  OUTPUT 
FUNCTION  =  FOURIER  TRANSFORM  OF  INPUT 

INPUT:  B-DOT  NEAR  LOWER  WIRE 
OUTPUTS:  D-DOT  AT  NOSE 

B-DOT  ON  FUSELAGE  OVER  RIGHT  WING 
B-DOT  AT  VARIOUS  LOCATIONS  NEAR  SURFACE 
D-DOT  AT  VARIOUS  LOCATIONS  NEAR  SURFACE 


EXAMPLES  OF  TRANSFER  FUNCTIONS 


ie-3  over 

358  1 
300  1 


D-DOT  AT  NOSE 


PRONY  ANALYSIS  OF  FIELDS 
MEASURED  ON  THE  MODEL 


REPRESENT  SENSOR  OUTPUT  WAVEFORMS  AS  FOLLOWS 

N  a  .  t 

V ( t )  =  1  A.e  cos(u.t  +  $.) 

i*I  1  11 

2N  s.t 

V  T*  _  1 


Si  *  ARE  NATURAL  FREQUENCIES  OR  POLES 

R.  ARE  RESIDUES 


Model  ot  thunderstorm  charge  distribution. 


CHARACTERISTIC  TIMES 

CORONA  CURRENT  RISETIME  (LABORATORY  MEAS.)  10-50  ns 

LIGHTNING  CURRENT  RISETIME  (REMOTE  ELECTRIC 

FIELD  MEAS.)  30-8000  ns 

PERIOD  OF  LOWEST  ELECTROMAGNETIC  MODE  OF 

F-106  (LABORATORY  SCALE  MODEL  MEAS.)  110  ns 

TIME  CONSTANT  FOR  CHARGING  F-106  IN 

CHANNEL  (ESTIMATE)  ^250  ns 

F-106  DIRECT  STRIKE  RISETIME  OF  B  20-40  ns 

OF  D  20-1000  ns 
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IE  6  A/s  ft 


■SI  1.53  2.55 

IE-6  S 


SOME  RESULTS  FROM  COMPARISON 
OF  MODEL  AND  IN-FLIGHT  DATA 


IN-FLIGHT  FREQUENCY  SPECTRUM  PEAKS  ARE  IN 
GENERAL  AGREEMENT  WITH  MODES  OF  MODEL 
AT  9 MHz  AND  21  MHz 

SHOULD  BE  ABLE  TO  INFER  SOME  CHANNEL  PROPERTIES 
FROM  IN-FLIGHT  SPECTRA 

IN-FLIGHT  D-DOT  WAVEFORMS  LONGER  DURATION  THAN 
B-DOT  WHEREAS  DURATIONS  SAME  ON  MODEL 


AN  OVERVIEW  OF  THE  ELECTRICAL/ELECTROMAGNETIC  IMPACT  OF 
ADVANCED  COMPOSITE  MATERIALS  ON  AIRCRAFT  DESIGN 


by 


Dr.  John  C.  Corbin,  Jr. 


Wr ight-Patterson  Air  Force  Base 


The  impact  of  the  application  of  composite  structures  in 
aircraft  presented  from  the  electromagnetic  viewpoint. 
Fundamental  electromagnetic  differences  between  metal  and 
composite  aircraft  are  described  and  technology  develop¬ 
ments  in  shielding  effectiveness,  joint  and  fuel  system 
design,  and  power  system/equipment  integration  are  reviewed. 
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SUBSTANTIALLY  CHANGED 


TECHNOLOGY  TRENDS 


PRE-1950'S  1950'S  1960'S  I970'S  1980'S 
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KEVLAR/EPOXY 

HYBRIDS  (CARBON,  GLASS  &  KEVLAR) 


AIRCRAFT  APPLICATIONS 

•  YF-16  FORWARD  FUSELAGE 


•  F/A  18  HORNET 


•  AV-8B  V/STOL 


•  767 


F/A-18A  MATERIALS  DISTRIBUTION 


AV-8B  COMPOSITES  APPLICATIONS 


5  006  POUNDS  OF  STRUCTURE 
1,317  POUNDS  OF  GRAPHITE/EPOXY 


767  NON  METAL  STRUCTURE 


KEVLAR 

COMPOS  I TE (GR/EP-KEV) 


AIR  FORCE  STUDY  (1979) 
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DETERMINE  IF  EM  PROGRAMS  ARE 
IN  BALANCE  WITH  STRUCTURAL 
PROGRAMS 
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STANDARDS  AND  SPECIFICATIONS,  AND 
DEVELOPMENT  OF  STANDARD  ACCEPTED  TEST 
METHODS  FOR  CRITICAL  AREAS  (SUCH  AS 
SHIELDING  EFFECTIVENESS) 


Washer  Specimen  Mounting  Detail 


GP03-0153-1 


Frequency  -  MHz 


0.01  0.1  1  10  100  1,000  10,000  100,000 

Frequency  -  MHz  gpo3-ois3-« 


EMI  LEAKAGE 

TEST  PANEL 

LIST 

CONFIGURATION 

IOENT. 

CONFIGURATION 

JOINT 

JOINT  SrAL  CONFIGURATION 

A 

G/E  Tape  Mat'l 

None 

None 

8 

G/E  Cloth 

None 

None 

C 

Aluminum 

None 

None 

D 

G/E  <  r In  Plated) 

None 

None 

G 

G/E -A  1  umi  num 

Single  Lap 

Shear 

Form- In-P lace  (FIP)  Seal 

H 

G/E -A  1 umi num 

Single  Lap 

Shear 

Tin  Plated-FIP  Seal 

J 

G/E -A  1 umi num 

Single  Lap 

Shear 

FIP  Seal 

K 

G/E-Aluminum 

Single  Lap 

Shear 

FIP  Seal -Finger  Stock 

l 

G/E  -G/E 

Single  Lap 
Shear 

Tin  Plated 

Nl 

G/E  -G/E 

Double  Lap 

Shear 

Fay  Seal 

N 

A 1 um i n  um- A  1  urn i n  um 

Double  Lap 
Shear 

Fay  Seal 

P 

G/E -Aluminum 

Single  Lap 
Shear 

FIP  Seal-Finger  Stock 

R 

G/E -G/E 

Single  Lap 

Tin  Plated-FIP  Seal- 
Flnger  Stock 
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EMI  TEST  PANEL  DATA 

RELATIVE  PERFORMANCE  OF  PANELS  WITH  SEAMS 


Panel  Description 

Soam  Preparation 

Relative 

Performance 

E  H 

A  1 um i num~A 1 umi num 

None  Double  Lap  Shear  (DLS) 

100 

97 

Graphite/Epoxy  Cloth  -  Graphite/ 
Epoxy  Cloth 

Tin  Plated,  Sealed 

84 

84 

Aluminum  -  Graphite/Epoxy  Cloth 

Ponding  Strip,  Sealed 

69 

79 

Graphite/Epoxy  Cloth  -  Graphite/ 
Epoxy  Cloth 

Tin  Plated,  Ponding  Strip 
Sealed 

64 

78 

Aluminum  -  Graphite/Epoxy  Cloth 

Sealed 

58 

99 

Aluminum  -  Graphite/Epoxy  Cloth 

Tin  Plated,  Sealed 

49 

96 

Graph Ite/Epoxy  Cloth  -  Graphite/ 
Epoxy  Cloth 

None  (DLS) 

50 

4 

Graphite/Epoxy  Cloth  -  Graphite/ 
Epoxy  Cloth 

Bonding  Strip,  Sealed 

57 

55 

Graphite/Epoxy  Cloth  -  Graphite/ 
Epoxy  Cloth 

Sealed 

10 

66 

C 

(4) 

A 1  umi num 

99 

99 

D 

(4) 

Tin  Plated,  Graph  1 te/Epoxy  Cloth 

95 

89 

A 

(4) 

Graphite/Epoxy  Tape 

80 

71 

B 

(4) 

Graph Ite/Epoxy  Cloth 

70 

79 

NOTES: 

1.  All  panels  show  relationship  to  best  panel  whoso  value  Is  100 

7.  E  (electric  field) 

J.  H  (magnetic  field) 

4.  One  piece  panels  (no  seams) 

5.  Single  lap  shear  (SLS)  unless  otherwise  indicated 

6.  The  seals  are  a  formed-l n-pl ace  rubber  gasket  used  to  prevent  water  leaks 
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G/E-G/E  Single  Lap  Shear  Tin  Pla+e-Fip  Seal-Finger  Stock 


RATIO  OF  IMPEDANCES 


FUSELAGE  shielding 
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TRIMETRIC  VIEW  OF  WIRE  ROUTING 


Bond  load  boxes  to  Al  Da^ei 
All  loads  in  RF  tight  boxes 


INDUCED  VOLTAGE  ON  SINGLE  WIRE 


Frequency  -  Hz 


10k  100k  1 M  10M  100M  1G  10G 

Frequency  -  Hz 


SHIELDING  OF  ALUMINUM  AND  COMPOSITE  FIXTURES 

RELATIVE  TO  EXPOSED  GROUND  RETURN  WIRE 


Frequency  -  MHz 
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EMI  OUTDOOR  TEST  SETUP 
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EMI  TEST  SETUP  IN  ANECHOIC  CHAMBER 

(A)  ANTENNA,  (B)  FIELD  METER,  (C)  WING 
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INTERMODULATION  EFFECTS 


FOUND  (NO  HARMONICS  GENERATED) 
FROM  HIGH  CURRENT  LEVEL  TESTS 
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HANDLED  IN  NORMAL  AIRCRAFT 
DESIGN 


AV-8B  COMPOSITE  FORWARD  FUSELAGE  DEVELOPMENT 


ELECTRICAL  POWER 


6/E  PANELS  AND  COUPONS  WITH  BOLTED  JOINTS 
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CONDUCTIVE  SURFACE  COATING  REQUIRED  TO 
PREVENT  LIGHTNING  PENETRATION  OF  G/E  TEST 
SPECIMENS  (FIG  6-65) 


Pulsed  Current 


SIMPLIFIED  BLOCK  DIAGRAM  OF  LIGHTNING  TEST  SETUP 


‘No»  uvert  ii*  all  teits 
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ELECTRICAL  POWER 
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ARRESTORS  AT  REMOTE  POINTS  OF 
POSSIBLE  LIGHTNING  ENTRY  (LIGHTS, 
PROBES,  ETC.) 
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BOEING  STUDY  PROGRAM 
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STRUCTURAL  APPLICATION  OF  COMPOSITE  MATERIALS  AND 
THE  DIRECT  EFFECTS  OF  LIGHTNING  STRIKES 


by 

Mr.  William  E.  Howell 


Langley  Research  Center 
National  Aeronautics  and  Space  Administration 

The  direct  effects  of  lightning  strikes  on  composite 
materials  and  protection  approaches  will  be  described. 
Approaches  to  EMI  shielding  which  maintain  weight  advan¬ 
tage  and  structural  integrity  over  the  life  of  the 
airframe  will  be  discussed. 


F3 

5/7 


GRAPHITE/EPOXY  UPPER  AFT  RUDDER 
DOUGLAS  DC-10 


FRONT  SPAR 

ALUMINUM  ALLOY 


ALUMINUM  ALLOY  U 
HINGE  FITTINGS 
15  PLACES) 


9 


FIBERGLASS-EPOXY 


LIGHTNING  EFFECTS  ON  COMPOSITE  STRbCTURES 


KEVLAR  49  EPOXY 
GRAPHITE  EPOXY 


F-106B  RESEARCH  AIRCRAFT 
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EXAMPLE  PROTECTION  SYSTEMS 


0  FLAME  SPRAYED  ALUMINUM 
0  ALUMINIZED  GLASS  (THORSTRAND®  ) 
0  ALUMINUM  STRIPS/TAPE 
o  METAL  SCREEN  OR  WIRE  MESH 


CERTIFICATION  CURRENT  TEST  WAVEFORM  COMPONENTS 

FOR 

EVALUATION  OF  DIRECT  EFFECTS 
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F-106B  COMPOSITE  FIN  TIPS 


0  KEVLAR-EPOXY  WITH  THORSTRAND® 

0  GRAPHITE/EPOXY  WITHOUT  PROTECTION 

0  GRAPHITE/EPOXY  WITH  FLAME  SPRAYED  ALUMINUM 

0  KEVLAR/EPOXY  WITH  FLAME  SPRAYED  ALUMINUM 


5 


EFFECT  OF  LIGHTNING 
ON 


CONCLUDING  REMARKS 


0  COMPOSITES  EXHIBIT  STRUCTURAL  ADVANTAGES  COMPARED  TO  METALS 

0  EXCELLENT  IN-SERVICE  PERFORMANCE  AND  MAINTENANCE  EXPERIENCE  HAVE  BEEN 
ACHIEVED  WITH  OVER  150  COMPOSITE  COMPONENTS  DURING  8  YEARS  AND  OVER 
2  MILLION  HOURS  OF  FLIGHT  SERVICE  WITH  NO  SIGNIFICANT  DAMAGE  FROM 
LIGHTNING  STRIKES 

0  EFFECTS  OF  LIGHTNING  ON  COMPOSITE  MATERIALS  AND  LIGHTNING  PROTECTION 
SYSTEMS  ARE  BEING  EVALUATED 

0  GROUND  AND  FLIGHT  DATA  BASE  IS  BEING  DEVELOPED  FOR  THE  ELECTRICAL 
SAFETY  OF  AIRCRAFT 
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LIGHTNING  INTERACTION  ANALYSIS 


by 


Dr.  Karl  S.  Kunz 


Kunz  Associates,  Incorporated 


Description  of  lightning  interaction  analyses  and  how 
they  are  performed  including  lightning  model,  aircraft 
geometry,  interior  equipment  and  cable  layout,  and  model¬ 
ing  of  interconnecting  system.  Sample  direct  strike 
problem  and  (generic)  expected  results.  Overview  of 
mathematical  basis  used  in  interaction  analysis  and 
description  of  finite  difference  method. 
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WHAT  IS  A  LIGHTNING  INTERACTION  ANALYSIS  - 


*  A  MATHEMATICAL  TREATMENT  OF  THE  PROPAGATION  OF 
ELECTROMAGNETIC  ENERGY  FROM  A  LIGHTNING  BOLT  TO 
AN  AIRCRAFT  AND  ON  INTO  SUSCEPTIBLE  INTERIOR 
EQUIPMENT 

•  USES  EXPERIMENTALLY  DETERMINED  CHARACTERISTICS 
AS  THE  INPUTS  OF  MATHEMATICAL  MODELS 

•  PREDICTS  RESPONSE  LEVELS  (VOLTAGE  AND  CURRENT)  AT 
THE  INPUTS  (PINS)  OF  SUSCEPTIBLE  EQUIPMENT 

*  ALLOWS  UPSET/DAMAGE/FAILURE  ASSESSMENTS  TO  BE  MADE 
FOR  THE  SUSCEPTIBLE  EQUIPMENT 


WHY  ft  LIGHTNING  INTERACTION  ANALYSIS  AND  NOT  JUST  EXPERIMENT 

*  EXPANDS  OW  EXPERIMENT 

-  SOURCE  VARIATIONS,  AIRCRAFT  MODIFICATIONS  AND 
.EQUIPMENT  CAN  BE  ACCOMODATED 

*  INCREASES  UNDERSTANDING 

-  MODELING  INCREASES  UNDERSTANDING  AS  MODELS  ARE 
REFINED  AND  MADE  MORE  ACCURATE 


EFFECTIVE 

-  ANALYSIS  CAN  BE  QUICKLY  AND  INEXPENSIVELY  PER¬ 
FORMED,  WHILE  ADEQUATE  ACCURRACY  IS  MAINTAINED 


HOW  IS  A  LIGHTNING  INTERACTION  ANALYSIS  PERFORMED  - 


•  DEFINE  SOURCE  (DIRECT  STRIKE,  RADIATED  FIELDS,  ETC.), 
AIRCRAFT  (707,  747,  ETC.)  AND  POSSIBLY  SUSCEPTIBLE 
EQUIPMENT  (RADAR,  NAVIGATIONAL  EQUIPMENT,  ETC.) 

•  OBTAIN  RELEVANT  EXPERIMENTAL  DATA,  SUCH  AS 

-  LIGHTNING  TIME  BEHAVIOR  OR  SPECTRUM 

-  AIRCRAFT  GEOMETRY  AND  CONSTRUCTION 

-  INTERIOR  EQUIPMENT  AND  CABLE  LAYOUTS 

-  ELECTRICAL  PARAMETERS  (CABLE  SIZE,  SHIELDING, 
IMPEDANCE,  TERMINATIONS,  ETC.) 

-  DEVICE  UPSET/DAMAGE/FAILURE  THRESHOLDS  AND 
MECHANISMS 

•  MODEL  THE  INTERCONNECTED  SYSTEM  OF  SOURCE,  AIRCRAFT 
AND  EQUIPMENT 

•  SELECT  A  MATHEMATICALLY  TRACTABLE  REALIZATION  OF  THE 
MODEL 

•  CHECK  THE  MATHEMATICAL  MODEL  FOR  COMPLETENESS  AND 
VALIDITY  (COMPARE  PREDICTIONS  WITH  KNOWN  EXPERIMENTAL 
RESULTS) 

•  PREDICT  RESPONSES  AT  THE  SELECTED  SUSCEPTIBLE  EQUIPMENT 

•  EXAMINE  SENSITIVITY  TO  PARAMETER  VARIATIONS  (OPTIONAL 
"SAFETY"  MEASURE) 


AIRCRAFT  DETAILS 


Typical  elements  and  cabling  associated  with  the  aircraft 
power  system. 


bulkhaod 


Elementary  volumes  within  the  aircraft. 


CA3LE  DETAILS 


CABiE  TYPES 
(TRANSMISSION  lines) 


Coax  i  ai _ 

Triaxial. . 

IIULTl  AXIAL 

Twinaxial. 


Open  Lines 
•  stripline . 


■  MICROSTRIP _ - 

■  TWO-WIRE  •  • 

■  EDGESTR1P 

■  EDGEWIRE  • 


•  WIRE  OVER  GROUND  * 


MATHEMATICAL  REALIZATION  - 

•  GENERAL  REQUIREMENTS  - 

SOURCE  X  EXTERIOR  RESPONSE  X  PENETRATION  X  INTERIOR 
RESPONSE  X  SHIELDING  EFFECT  =  RESPONSE  AT  "PIN 

•  EXTERIOR  RESPONSE  X  PENETRATION  X  INTERIOR  RESPONSE 
MOST  DIFFICULT  PART 

•  POSSIBLE  APPROACHES  (MAY  BE  COMBINED  WITH  TRANSMISSION 
LINE  THEORY,  BETHE  SMALL  HOLE  THEORY,  MULTIPLE  RUNS,  ETC.) 

-  SIMPLE  CANONICAL  SHAPES 

“  MoM  THIN  WIRE  TYPE  CODES  (EFIE) 

-  PATCH  CODES  (MFIE) 

-  FINITE  DIFFERENCE  TECHNIQUES 
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ANONICAL  SHAPES 


Iside  incident  on  a  prolate  spheroid. 


>>>r>>  r>t)~nr 

ground  plane 


crossed  with  an  electrically  thick  cylinder. 


Body-o£-revolutiou  model  of  the  EC-135  aircraft.  Current  zones 
ere  Indicated  with  dotted  lines. 


FINITE  difference  F-lll  model 


FINITE  DIFFERENCE  METHOD  - 

*  BASED  ON  BRUTE  FORCE  TIME  STEPPING  OF  MAXWELL'S 
EQUATIONS 

*  INCORPORATES  ANY  MATHEMATICALLY  EXPRESSIBLE*  SOURCE, 

l.E.  I(t)  =  e'“‘  -  e'6t 

*  ACCURATE  EXTERIOR  RESPONSE  PREDICTIONS 

*  WITH  EXPANSION  TECHNIQUE  CAN,  ALSO,  PERFORM  INTERIOR 
RESPONSE  PREDICTIONS  AT  REASONABLE  COST 

*  CAN  HANDLE  COMPOSITES,  AS  WELL  AS  METAL  AIRCRAFT 
PANELS 
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DEFINITION  OF  THE  FINITE  DIFFERENCE  APPROACH 

Finite  differencing  consists  of  replacing  continuous 
partial  derivatives  In  P.D.E.'s  with  appropriate  finite 
differences.  For  example: 

3y  -  4(yn)  •  yn+1  -  yn  ;  s’y  ^  C  *<y„)3  ■  y 2y„+  *  y„ 

Finite  differencing  discritizes  the  P.D.E.  and,  hence, 
the  problem  being  solved,  i.e. 


Finite  differencing  is,  therefore,  an  approximation 
that  in  the  limit  of  zero  mesh  size  is  exact. 


Finite  differencing  does  not  require  any  special  model 
of  the  problem  to  facilitate  a  solution,  just  the  appro¬ 
priate  P.D.E.  such  as: 

1  3T  3e_  3h. 

Ig-V^  +  Q/k  or  (jp  -  JF-)  s  -»0  ST 

(heat  equation)  (portion  of  Maxwell  Equations 

for  thin  scatterer  in  cylin¬ 
drical  coordinates) 
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EVOLUTION  OF  PRECEEOING  FINITE  DIFFERENCE  APPROACH  TO  EM 


*  The  Maxwell  Equations 


*  Classical  Boundary  Value  Solutions 

•  Introduction  of  Computers/Computer  Oriented  Numerical  Analysis 

*  Integral  Equation  Approaches  (EFIE  and  MFIE) 

•  Finite  Difference  as  presently  applied  to  EM  coupling 

1)  feasibility  of  application  to  realistic  problems  - 
K.S.  Lee  -  "Nun.  Sol.  of  Int.  Bound.  Val.  Prob.  Involv¬ 
ing  Maxwell's  Equas.  in  Iso.  Media",  IEEE  Trans¬ 
actions  A  and  P,  May, 1966. 

2)  application  In  2D  to  realistic  problem  with  radiation 
boundary  condition  - 

D.E.  Merewether  -  "Trans.  Currents  Induced  on  a  Metallic 

Body  of  Rev.  by  an  EM  Pulse",  IEEE  Trans¬ 
actions  on  EMC,  May,  1971. 

3)  formulation  of  3D  code  with  radiation  boundary  condition  - 
R.  Holland  -  "THREDE:  A  Free-Fleld  EMP  Coupling  and  Scat¬ 
tering  Code",  Mission  Research  Corp.,  AMRC- 
R-95,  Sept.,  1976. 
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EVOLUTION  -  2 


4)  application  to  complex  scattering  object  with  com¬ 
parison  to  experiment  - 

K.S.  Kunz  and  K.M.  Lee  -  "A  Three-Dim.  Flnite-Diff.  Solu. 

to  the  Ext.  Response  of  an  Aircraft 
to  a  Complex  Transient  EM  Environ¬ 
ment:  Part  1  -The  Method  and  Its  Im¬ 


plementation  and  Part  2  -  Comparison 
of  Predictions  and  Measurements", 
IEEE  Transactions  on  EMC,  May,  1978. 

5)  expand  subvolume  in  a  second  run  for  increased  spatial 
and  frequency  resolution  - 

K.S.  Kunz  and  L.T.  Simpson  -  "A  Technique  for  Increasing  the 

Resolution  of  Finite- Difference 


Solutions  of  the  Maxwell  Equations", 
IEEE  Transaction  on  EMC 
November,  1981 

6)  generalize  the  30  code  to  treat  lossy  dielectrics  - 
R.  Holland,  L.T.  Simpson  and  K.S.  Kunz  - 

"Finite-Difference  Analysis  of  EMP  Coupling  to  Lossy 
Dielectric  Structures",  IEEE  Transactions  on  EMC, 

August,  1980. 
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INCREASED  RESOLUTION  USING  EXPANSION  TECHNIQUE 

-  a/c  unexpanded  - 


PlflMP*  7.  Eihdm  Run  Shewing  Coekelt  Are*  Seull. 


DIELECTRIC  CAPABILITIES 


•  'll 


INTERIOR  COUPLING  APPROACH 


-scatm  _-inc 
Han  -ttan 


f(t) 

'  >  j  1 


E?"*-  (£  MsjR/L  <  Segment 
Mn  loop  11  <  of 

Resistance 
R 


/ Electrically 
I  Conducting 

/(3  "segments ) 


-scat, 

tan 


.Inc 

Han 


-  ,  Aircraft  Surface 

'  ryrrry?7 >>>  rrm >  *> >  jjj,. 


Lightning  Channel  Source 


t&n  wn 


op 

Inc 


g(t) 

"I  n 


(I  EsASs) 
..scat,  loop 
Htan - rE - 


:onjugate 

^Resistive 

^Segment 


Magnetically 

Conducting 

Wire 

(3  segments) 


^scat, 

Han 


-H 


Inc 

tan 


} 


T  r .  .  ,  Complementary  Aircraft  Surface 

i  i  i  .  i  1  i  ,  _ 

'  "  *  ,r  'J  77 


Conjugate  Lightning  Channel  Source 


189 


PIN  PREDICTIONS  -  SINGLE  MULTILAYERED  CABLE 


•  USE  F.D.  TO  FIND  CURRENTS  AL0N6  CABLE  SHEATH; Ib 

•  USE  SURFACE  TRANSFER  IMPEDANCE;  lj>  AS  DEFINED  BY 
SCHELKUNOFF,  TO  FIND  THE  INTERIOR  CURRENTS: 

Ia(x)  -  (X;X*)  '  '  Ib(x')dx' 

WHERE  Gn  IS  THE  APPROPRIATE  GREEN'S  FUNCTION  THAT 
INCORPORATES  THE  CORRECT  BOUNDARY  CONDITIONS  FOR 
THE  GEOMETRY  AT  HAND 

•  EVALUATE  Ia  (X  =  L)  TO  FIND  THE  CURRENT  AT  THE  PIN 

•  EVALUATE  THE  VOLTAGE  ACROSS  THE  DEVICE  CONNECTED  TO  THE 
PIN;  Vd,  USING  THE  PIN  CURRENT  AND  THE  DEVICE'S  IMPEDENCE 
Zd;  I.E.  Vd  *  Ia (X  *  L)Zd, 


*ONLY  DIFFUSION  THROUGH  SHIELD  CONSIDERED 


AD-AU*  117 
unclassified 
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FEDERAL  AVIATION  ADMINISTRATION  TECHNICAL  CENTER  ATL— ETC  P/0  1/3 
A  COMPENDIUM  Of  LI0HTNIN0  EFFECTS  ON  FUTURE  AIRCRAFT  ELECTRONIC— ETC  <U> 
FEB  B2  N  0  RASCH 

DOT/FAA/CT-S2/30  ML 


END 


EXPECTED  RESULTS  - 


EXTERIOR  RESPONSE  -  SIMILAR  TO  PERFECTLY  CONDUCTING 

A/C  RESPONSES 


INTERIOR  CABLE  RESPONSE,  WIRE  EXTERIOR  -  WEAKLY 

DAMPED  SINUSOID,  SEE  BELOW 


•  PIN  RESPONSE  -  SIMILAR  TO  WIRE  EXTERIOR 


SUMMARY 


FEATURES 


°  Any  fuselage  exterior  geometry  can  be  modeled,  including: 

-  composites 

-  conducting  panels 

-  mix  of  composite  and  metal 

°  Various  coupling  pathways  can  be  modeled,  including: 

•  diffusion  through  composite  panels 

-  seams  around  panels 

-  small  apertures  around  doors /hatches /wheel  wells,  etc. 

•  large  apertures  such  as  windows 

°  Detailed  interior  geometries  can  be  treated,  including: 

-  individual  wires  with  various  terminations 

-  surrounding  "fill" 

-  adjacent  wires  to  within  a  cell  size  (-0.05m  or  -2"  at  best) 
°  Fast  risetime  (-SO-SOns)  pulses  can  be  easily  incorporated 

°  Non-linear  effects  can  be  modeled 

'  -  attachment  points  can  be  selected  based  on  experience,  while 

detachment  points  can  be  selected  based  on  fields  exceeding 
preset  thresholds 

-  interior  arcing  can  be  modeled  similarly 
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AREAS  OF  APPLICATION 


0  Exterior  I  and  V  response  predictions  as  a  function  of: 

-  position 

-AC  construction  (metal  or  composite  or  mix) 

-  excitation  source 

-  attachment/detachment  location 

°  Interior  Responses 

-  interior  field  levels 

-  wire  currents 

-  transfer  functions 

0  Hazard  Assessment 

-  induced  current  damage 

-  field  induced  upset 

-  fuel  ignition  from  arcing 

0  Protection  Measures  Evaluation 

-  field/ charge  and  current  penetration  reduction 
(from  covered  seams,  mesh  across  windows,  etc.) 

-  arc  suppression 

(from  cable  rerouting,  interior  geometry  changes,  etc.) 

-  protective  device  effects 

(depends  on  "threat"  spectrum,  device  location,  device 
operations,  etc.) 
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INTERMITTENT/TRANSIENT  FAULTS  IN  DIGITAL  COMPUTERS 


by 


Dr.  Gerald  M.  Masson 


Johns  Hopkins  University 


Need  and  objectives  of  digital  system  upset  assessment 
methodology:  The  definition  of  upset.  Description  of 
approach  being  developed  for  assessing  upset  potential 
of  digital  systems.  Upset  model  types  and  importance  of 
burst  error  models;  dominant  importance  of  program  transi¬ 
tion  models.  Definition  and  use  of  system  state  probability 
transition  matrix  in  upset  analyses.  Example  of  upset 
tolerant  microcontroller. 


195 


FAULTS 

-  PERMANENT 

-  INTERMITTENT 

-  TRANSIENT 

-  I/T 
MODELS 

-  STUCK-AT 
TESTS 

-  DETECTION 

-  LOCATION ' 


•  DUPLEX  SYSTEMS 

-  ROLLBACK 

•  TMR  SYSTEMS 

-  ROLLAHEAD 

•  DIAGNOSABLE  SYSTEMS 

-  INTELLIGENT  UNITS 


*  HARDWARE 

-  CENTRAL  PROCESSING  UNIT  (CPU) 

-  READ-ONLY  MEMORY  (ROM) 

-  READ/WRITE  MEMORY  (RAM) 

-  INPUT/OUTPUT  DEVICES  (I/O) 

-  SUPPORT  LOGIC 

*  SOFTWARE 

-  LOOKUP  TABLES 

-  CHARACTERIZATION 

I.  INPUT-  SENSORS  SCANNED 

II.  DATA  PROCESSING 

III.  CONTROL  SIGNALS  TO  ACTUATORS 


•  CPU  TESTING 

*  RECOVERY  STRATEGIES 

-  DUPLICATION 

-  TMR 

-  WATCHDOG  TIMER 


watchdog  timer 


X 


RESET 

INPUT 

- T2— • 


FIGURE  1.  WATCHDOG  TIMER 


CONTROL  SYSTEM  CONSIDERED  ALONE 


#  CONTROL  SYSTEM  INTERACTS  WITH  ENVIRONMENT 

*  INTERMITTENT/TRANSIENT  FAULTS 

-  SYSTEM  ''TRANSIENT*  RESPONSE 

-  SYSTEM  "STEADY  STATE*  RESPONSE 


FIGURE  5.  CONTROL  SYSTEM  SITUATED  IN  HOSTILE  ENVIRONMENT 


FAULTS,  ERRORS.  AND  UPSETS 

•  FAILURES 

-  CIRCUIT  LEVEL 
•  ANALOG  NATURE 

*  FAULTS 

-  LOGICAL  LEVEL 

-  DIGITAL  NATURE 

-  LOGICAL  DIFFERENCE  AT  FAULT  SITE 

•  ERRORS 

-  LOGICAL  LEVEL 

-  DIGITAL  NATURE 

-  DUE  TO  PROPAGATION  OF  FAULTS 

-  LOSS  OF  SYNCHRONIZATION  PROBLEM 

NEW  DEFINITION 

*  UPSETS 

-  SYSTEM  LEVEL 

-  FUNCTIONAL  NATURE 

-  TRANSFER  FUNCTION 


CONTAINMENT  SETS 

*  A  FINITE  SET  OF  MUTUALLY  EXCLUSIVE  FUNCTIONAL  STATES 

*  COVERS  ALL  POSSIBLE  SYSTEM  TRANSFER  FUNCTIONS 

*  INCLUDES 

-  VALID  STATES 

-  ERRONEOUS  STATES 
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TRANSITION  MATRIX: 


T-iPijl  .  WHERE  Pij  IS  THE  PROBABILITY  OF  A  TRANSITION 
FROM  STATE  j  TO  STATE  i  ,  GIVEN  THAT  AN  ERROR  HAS  OCCURRED 


L  (K+l)  »  T  L(K)  ,  L(K) 


p±(k)  IS  THE  PROBABILITY  OF  BEING  IN  CONTAINMENT  STATE 
LiE{L}  AFTER  k  UPSETS 


AFTER  k  UPSETS, 

L  (K)  -  TK  L(O) 


FAULT  ANALYSIS  AND  SYSTEM  VALUATION 


SINGLE  UPSET  ENVIRONMENT 


-  P  OF  T 
n 


id 


OF  MAJOR  CONCERN 


*  MULTIPLE  UPSET  ENVIRONMENT 

-  P  OF  TK  FOR  URGE  K  OF  MAJOR  CONCERN 
11 


*  EXAMPLE 

7/8  1/8 

1/8  7/8 


LIM  (T*)k  = 

15/19 

15/19 

LIM  (T**)K  - 

1/2 

1/2 

K-*  » 

_  A/19 

A/19 

■ 

y 

1/2 

1/2 

T*  = 


3/A 

15/16 

1/A 

1/16 

T*. 
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A  T  * 

1/4 


FIGURE  6.  TWO  2-LOOP  IMPLEMENTATIONS 


FAULT..  TOLERANCE 

*  CONTAINMENT  SET  AND  TRANSITION  MATRIX  ANALYSIS  PROVIDES  FEEDBACK 

TO  IMPROVE  DESIGNS 

*  REMOVAL  OF  ERRONEOUS  ELEMENTS  FROM  THE  CONTAINMENT  SET 

AUTOMATICALLY  PROVIDES  FAULT  TOLERANCE 
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miimM  1 i  vi  i  ■  ao ;  v  * )  w  ;Tfl  -2  w 


•  PROGRAM  TYPES 

-  EXITING 

-  LOOPING 

*  TAKE  THE  CONTAINMENT  SET  TO  CONSIST  OF  ALL  POSSIBLE  LOOP  PROGRAMS 

-  INCLUDES  VALID  LOOPS 

-  INCLUDES  ERRONEOUS  LOOPS 


GIVEN  THE  EXECUTION  OF  LOOP  PROGRAM  l.  c  {l}  ,  UPSets  can 
BE  CHARACTERIZED  AS: 

(1)  DATA  CHANGE  - 

DATA  VALUES  ARE  MODIFIED,  BUT  EXECUTION 
REMAINS  IN  l. 

(2)  PROGRAM  BUMP  - 

EXECUTION  TEMPORARILY  DIVERGES  FROM  ^  BUT 
EVENTUALLY  RETURNS  TO  \ 

(3)  PROGRAM  TRANSITION  -- 

EXECUTION  JUMPS  FROM  to  ^  ^  t  i. 

PROGRAM  TRANSITION  =  STEADY  STATE  OPERATIONAL  DEVIATION 
TRANSITION  INTO  INVALID  EMBEDDED  LOOP  =  SYSTEM  CRASH 
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ADDRESS  CONTFHTS 

NORMAL  EXECUTION  N  OP-CODE 

ERRONEOUS  EXECUTION  N+l  DATA 


NORMAL  EXECUTION  N  OP- CODE 
ERRONEOUS  EXECUTION  N+l  DATA  0 
ERRONEOUS  EXECUTION  N+2  DATA  1 


ERRONEOUS  EXECUTION  N  DATA  TABLE 

ERRONEOUS  EXECUTION  N+l  DATA  TABLE 


FIGURE  7.  ERRONEOUS  LOOP  INSTRUCTION  EXECUTION  * 


Result 

Addr 

Oats 

LO  Code 

Ll_  Code 

b2  Code 

Other 

LO 

e 

OOOO 

e 

00 

e 

NOP 

e 

e 

LO 

e 

00C9 

e 

00 

e 

NOP 

LO 

OOCA 

3E 

r->HVI  A,0C3H 

Li 

OOCB 

C3 

r>JMP  0D3H 

LO 

oocc 

03 

OUT  0 

LO 

OOCD 

00 

NOP 

LO 

OOCB 

22 

LX I  H,0CFC3H 

L2 

OOCF 

C3 

r->JMP  OCFH 

LO 

OOCO 

cr 

1 

R8T  1 

LO 

00D1 

00 

NOP 

LO 

0002 

32 

8TA  0CBC3H 

N 

f 

* 

Li 

0003 

C3 

JMP 

OCBH 

LO 

0004 

CB 

1 

R8TV 

LO 

0005 

00 

NOP 

- 1 

LO 

0006 

C3 

JNP  OCAH 

LO 

0007 

CA 

1 

JZ  0 

LO 

oooa 

00 

NOP 

LO 

e 

0009 

e 

00 

e 

NOP 

e 

e 

LO 

e 

OOFE 

e 

00 

e 

NOP 

LO 

oorr 

C7 

R8T  0 

Figure  I.  An  Erroneous  Loop  Exsaple  for  the  8095 
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FIGURE  9.  CONTROLLER  WITH  CONTAINMENT  HARDWARE 


#  HARDWARE 

-  CLOCK  STOP 

-  HALT 

-  READY 

-  HOLD 

-  INTERRUPTS 


PROGRAM  PATH  DIVERTERS 
*  SOFTWARE 

-  JUMP  CATEGORY  INSTRUCTIONS 

-  CALL  CATEGORY  INSTRUCTIONS 

-  RETURN  CATEGORY  INSTRUCTIONS 
(+  EFFECTS  OF  'UNDEFINED' 

INSTRUCTIONS) 


? 


**  A  PROGRAM  STRUCTURAL  ANALYSIS  IS  MADE  BASED  ON  PATH  DIVERTERS  •• 
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Tffi  : 

Boot  4 — 
KTUW  I 


ai 

U2 

m 

IAS 

BODY  4— 

BODY  4 — 

BODY  4— | 

BODY  v-. 

LOOP 

UMD  SP 

n sf 

DO  SP 

CALL  X 

TYPt 

BODY 

BODY 

BODY 

Ki m 

mm 

Da  sp 

X.  BODY 

i - 

i - 

BODY 

mm 

mm 

STWCTWtt 

LOAD  $P 

PUSH 

OCX  SP 

CALL  X 

TYPt 

BODY 

BODY 

BODY 

RtTUBM 

mm 

mm 

X,  BODY 

mm 


TW  ii  imp 

CALL  X<-» 

X;  HDY 

I _ 


rm  111  imp 

JUMP  X  <r- 

X:  BODY 

I _ 


IWHUll* 

AMES;  0000  4 — i 
AOOKSS  0001 


mmlss  rm 


FIGURE  10.  LOOP  STRUCTURES 


FAULT  TQlXRANIJaNTRQUILJESmJlULES 

•  HARDWARE 

-  CONTINUOUS  CLOCK 

-  UNCONDITIONAL  INSTRUCTION  EXECUTION 
(OP-CODE  FETCH  DETECTION) 

-  BAD  FETCH  DETECTOR 
(ROM  RESTRICT  MECHANISM) 

-  OPTIONAL  SAFE  ROM 

-  REQUIRES  2-3  INTEGRATED  CIRCUITS 
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TABLE  I 


Cmsh-Proof  Software  Design  Rules  Summary 


1.  Program  execution  from  RM  is  prohibited. 

2.  Exit  from  temporary  loops  must  be  guaranteed. 

3.  Stable  loops  must  include  a  call  to  a  check  subroutine,  which  guarantees  all 
assumptions  the  program  requires  for  continued  execution.  (These  include 

ASSUMPTIONS  ON  1/0,  INTERRUPTS,  AND  VARIABLES.) 

A.  Return  from  all  possible  interrupts  must  be  guaranteed. 

5.  Subroutines  cannot  call  themselves. 

6.  Subroutines  cannot  modify  the  stack  pointer  or  the  return  address. 

7.  Within  subroutines,  memory  store  instructions  which  permit  a  variable  store 

ADDRESS  MUST  GUARANTEE  THAT  THE  RE6ISTER  USED  AS  THE  ADDRESS  POINTER  CANNOT 
POINT  TO  THE  STACK  SPACE. 

8.  Instead  of  using  RET  or  RCN  instructions,  a  JMP  or  JCN  to  a  special  return 

ROUTINE  WHICH  GUARANTEES  THAT  THE  STACK  POINTER  POINTS  WITHIN  THE  STACK  SPACE 
BEFORE  RETURNING  MUST  BE  USED.  (THE  RETURN  ROUTINE  CONTAINS  THE  ONLY  RET 
INSTRUCTION  IN  THE  ENTIRE  PROGRAM.) 

9.  A  STACK  WALL  must  be  added.  (Leave  unused  ROM  space  as  00  or  FF.) 

10.  The  PCHL  instruction  cannot  be  used. 

11.  Either  a  SAFE  ROH  must  be  used,  or  all  erroneous  loops  and  erroneous  calls 
to  addresses  which,  when  considered  to  be  subroutines,  do  not  satisfy  either 
Rule  5,  6,  7,  or  8  must  be  removed. 
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mm  T  Tfll  FRANT  CONTROLLER  TEST  SYSTEM 

*  NOISY  POWER  SUPPLY  TEST  SOURCE 

*  DUAL  LED  CONTROLLERS 

*  UNMODIFIED  SOFTWARE 

-  LED  1.1 

-  LED  A. 6 

*  CRASH-PROOF  SOFTWARE 

-  LED  2,2 

-  LED  3.3 

-  LED  3. A 

-  LED  5.2 

-  OVERHEAD 

LED  2.2/LED  1.1  -  8.5  X 
LED  5.2/LED  A. 6  =  1A  X 
LED  3.3/LED  2.2  -  35  X 
LED  3.3/LED  1.1  -  A7  X 

SOFTWARE  TOOLS 

*  DESIGN  AIDS  FOR  FAULT  TOLERANCE  IMPLEMENTATION 

*  INTERACTIVE  USE  PROVIDES  EFFECTIVE  AND  EFFICIENT  DESIGN 

*  SAFE 

-  PRODUCES  SAFE  ROM  CONTENTS  FROM  SOURCE  CODE 
*  OUTPUT  USED  AS  INPUT  TO  LOOP 

*  LOOP 

-  LOCATES  BANNED  PROGRAM  STRUCTURES 

-  LOCATES  ERRONEOUS  LOOPS 

-  PROVIDES  CHECK  ON  INTENTIONAL  LOOPS 
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LOOP  ANALYSIS  OP  LSD  1.1,  FACS  i 


£o$°sskSc J*1*08, J  LED1  • 1  • s Are 

ONLY  VALID  (V,v)  OR  SRRONSOUS  CS,t)  ?  E 

LOOP:  SRRONSOUS 

00F*B  F5  PSH  PSW 

OOFC  00  NOP 

OOPD  C3  F3  00  JMP  00F3 

00F3  OS  DGR  B 

00F4  CS  RZ 

LOOP  SEARCH?  N 
LIST  CALLS?  Y 

ONLY  VALID  CV,v>  OR  ERRONEOUS  CE,r>  ?  E 


CM 

FE07 

[I/O] 

CM 

FEOF 

[I/O] 

LOOP:  ERRONEOUS 

0395  FC  OF  FE  CM  FEOF  [I/O] 

LOOP  SEARCH?  N 

LIST  CALLS?  N 

LIST  MEMORY  STORES?  Y 

ONLY  VALID  (V,v>  OR  ERRONEOUS  (E,r)  ?  V 
LOOP:  VALID 

006A  77  MOV  M,A 


LOOP:  VALID 
OOAC  34 

LOOP:  VALID 
00F:3  36  00 


INR  M 


00F:3  36  00  MV1  M,  00 

***  MAIN  AND  SWTCH  SET  AS  ERRONEOUS  *** 

X  LOOP  LED1 . 1 . OBJ  LED1 . 1 . SAFE 
LOOP  SEARCH?  Y 

ONLY  VALID  (V,v)  OR  E:RRONEOUS  (E,r>  ?  V 
LOOP:  VALID 

009D  CD  E3  01  CALL  01EE* 

00 AO  OD  DCR  C 

00A1  CP  9D  00  JNZ  009D 


LOOP:  VALID 
OOFS.  05 
00F4  C8 
OOFS  P 3 
00F6  7E 
00F7  P3 
00F8  FE  FO 
OOFA  CP  F5  00 


DCR  E: 

RZ 

I  NX  H 
MOV  A,M 
I  NX  H 
CPI  FO 
JN7  00F5 


OOFD  C3  F3  00  JMP  00F3 


LOOP:  VALID 
OOFS  23 
00F6  7E 
00F7  23 
OOFB  FE  FO 
OOFA  C2  F5  00 

LOOP:  VALID 
00F3  OS 
00F4  C8 


I  NX  H 
MOV  A,M 
I  NX  H 
CPI  FO 
JNZ  OOFS 


DCR  8 
RZ 

H 


TABLE  II 


LED  4.6  039A  922  *  Functional 


DIAGNOSABLE  SYSTEMS 
THEORY  EXPANSION 


A  MICROPROCESSOR-BASED  UPSET  TEST  METHOD 


by 


Ms.  Celeste  M.  Belcastro 


Langley  Research  Center 
National  Aeronautics  and  Space  Administration 


Description  of  a  microprocessor-based  upset  testing 
method  employing  transient  waveforms  randomly  injected 
into  a  digital  unit.  Upset  test  data  presented  along 
with  preliminary  observations. 
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OUTLINE 


•  BACKGROUND 

•  RESEARCH  OBJECTIVES  OF  UPSET  TESTING 

l 

•  ;  UPSET  TEST  DESIGN  CRITERIA 

•  UPSET  TEST  HARDWARE  IMPLEMENTATION 

•  PRELIMINARY  OBSERVATIONS 
0  FUTURE  PLANS 


EfiQflLECT-CAUSED  BY  I  IfillTNINC, 
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f  SYSTEM  AND  SUBSYSTEM  ASSESSMENT  - 

■  1  *  . 

CABLE  EXCITATION 

i 

•  CHANGING  MAGNETIC  FIELD  IN  A  COUPLING  TRANSFORMER 
*  • 

•  TRANSVERSE  ELECTROMAGNETIC  WAVES  GENERATED  ON 
PARALLEL-PLATE  TRANSMISSION  LINES 

I  INDIVIDUAL  UNIT  ASSESSMENT  - 

INTERFACE  CIRCUIT  INJECTION 

•  DIRECT  APPLICATION  OF  TRANSIENT  WAVEFORMS  TO  PIN  CONNECTIONS, 

RESEARCH  OBJECTIVES 


6  SHORT  RANGE 

I 

|  DEVELOP  A  METHODOLOGY  TO  TEST  A  DIGITAL 
SYSTEM  FOR  UPSETS 


I  LONG  RANGE 

I  CHARACTERIZE  UPSET  PHENOMENA  ' 

•  DEVELOP  DIGITAL  FAULT  SIGNATURES  THAT 
MODEL  UPSETS 

'  -  DIAGNOSTIC  EMULATION 

-  UP86T  VULNERABILITY  A88ES8MENT 
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UPSET  TEST  CRITERIA 


•  CHOOSE  A  CANDIDATE  PROCESSOR/CONTROLLER 

•  INJECT  TRANSIENT  SIGNALS  RANDOMLY 

•  ENHANCE  SIMULATION 

•  AVOID  SYNCHRONIZATION 


•  IDENTIFY  PROCESSOR'S  INTERNAL  STATE  WHEN  INJECTION  OCCURS 

'  •  DETERMINE  IF  UPSET  OCCURS  INDEPENDENTLY 

OF  PROCESSING  STATE 


•  VARY  THE  TRANSIENT  SIGNAL  INJECTION  POINT 

•  DETERMINE  IF  UPSET  SUSCEPTIBILITY 
IS  UNIFORM  THROUGHOUT  THE 
PROCESSING  SYSTEM 

•  OBTAIN  BIT  PATTERNS 

•  DEVELOP  FAULT  SIGNATURES 


CANDIDATE  PROCESSOR/CONTROLLER 


INTEL  pP  UNIT  - 
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PROGRAMMER 

1 

8080  INSTRUCTION  SET 
(2M  INSTRUCTIONS) 

I 

,  PROGRAM 

‘  •  I 

OPERATION  CODE  (OP-CODE) 

1  . 

8080 

I 

INSTRUCTION  CYCLES 

\ 

MACHINE  CYCLES  (IDENTIFIED  BY  STATUS  BITS) 

\ 

STATES 

I 

CLOCK  CYCLES  (02) 


TYPE  OF  MACHINE 

CEE 

MICROPROCESSOR  MACHINE  CYCIES 

STATUS  BITS 

SZ  S5  SI  S*L  SI  S2  SI 

so 

> 

NOJ_OF_  CL0CK..CYCLES 

INSTRUCTION  FETCH 

1 

0 

1 

0 

0 

0 

1 

0 

•'l  OR  !> 

MEMORY  READ 

1 

o. 

0 

0 

0 

0 

1 

0 

3 

MEMORY  WRITE 

0 

0 

0 

0 

0 

0 

0 

0 

3  OR  ij 

STACK  READ 

1 

0 

0 

0 

0 

1 

1 

0 

3 

STACK  WRITE 

0 

0 

0 

0 

0 

1 

0 

0 

3 

INPUT 

0 

1 

0 

0 

0 

0 

1 

0 

3 

OUTPUT 

0 

0 

0 

1 

0 

p 

0 

0 

3 

INIERRUPT 

0 

0 

1 

0 

0 

0 

1 

1 

5 

HALT 

1 

0 

0 

0 

1 

0 

1 

0 

3x 

INTERRUPT  WHILE  HALT 

0 

0 

1 

0 

1 

0 

1 

1 

5 

UPSET  TEST  CONFIGURATION 


TELETYPE  I/O 


LIGHTNING  INDUCED  EFFECTS  WAVEFORMS 


•  DAMPED  SINUSOID 


•  DECAYING  EXPONENTIAL 
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PRELIMINARY  OBSERVATIONS 

•  UPSET  HAS  BEEN  INDUCED  AND  OBSERVED  IN  THE  LABORATORY 

•  UPSET  DOES  NOT  OCCUR  AFTER  EACH  TRANSIENT  8IONAL  INJECTION 
-I  IMPLIES  CORRELATION  BETWEEN  UPSET  AND  PROCE88INC  8TATE 


•  NORMAL  FUNCTION  IS  RESTORED  BY  RESETTING  AND/OR 
REPROGRAMMING  THE  SYSTEM 


0  STATUS  BIT  SEQUENCES  HAVE  BEEN  RECORDED  THAT  DO  NOT 

i 

CORRESPOND  TO  AN  8080  MACHINE  CYCLE 

•  I 

•  ,  •  .  •  « 

•-  IMPLIE8  UNDEFINED  PROCESSING  STATES  BEING  ENTERED 


FUTURE  PLANS 


0  COMPLETE  THE  FOLLOWING  UPSET  TEST  MATRIX 


PIN  1  1  VI- L- 

WAVU'OHM  1 

DATA  HUS  I.IME.R 

l»n  chip 

X 

WAVEFORM  2 

X 

ADDRESS  miS  l  INrS 

CONNECT  on 

VV  A  VI:  F  OHiJ  3 

CONinOL  LINES 

t  Evn- 

cpu  CAno 

WAVEFORM  4 

I/O  LINES 

•  PERFORM  A  STATISTICAL  ANALYSIS  OF  THE  TIME 
DATA  TO  RELATE  UPSET  TO 

i 

•  internal  state  of  the  candidate  processor 

•  transient  signal  injection  point 


•  UTILIZE  A  SOFTWARE  SIMULATION  APPROACH  TO  DEVELOP 
FAULT  SIGNATURES  FROM  THE  STATUS  BYTE  DATA 


DIAGNOSTIC  EMULATION  ANALYSIS— NEED  AND  TECHNIQUE 


by 


Mr.  Gerard  E.  Migneault 


Langley  Research  Center 
National  Aeronautics  and  Space  Admini s t rat  ion 


A  brief  description  of  the  problem  of  determining  failure 
modes  will  clarify  the  usefulness  of  emulation.  The  dis¬ 
cussion  will  cover  the  relationship  of  complexity,  defini¬ 
tional  flaws,  specific  software  dependent  behavior  and 
lumped  parameter  analytical  models.  Deterministic  and 
stochastic  application  possibilities  of  emulation  will  be 
identified,  as  will  implementation  details  —  at  the 
level  of  a  conceptual  scheme  and  in  terms  of  supporting 
components.  A  sample  application  will  be  described. 

Future  possible  directions  will  be  identified. 
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CHARACTERISTICS  OF  FAULT  TOLERANCE 


•  REDUNDANCY 

•  ERROR  DETECTION 

•  CONTINUED  OPERATION 

--  RECOVERY 

••§  INCREASED  COMPLEXITY 


•  SAFETY  REQUIREMENT  IMPLIES  PROBABILITY  OF  SYSTEM  FAILURE 
IN  10-HOUR  FLIGHT  LESS  THAN  ABOUT  10"9 


•  FAULT  INTOLERANT  SYSTEM 
WORST  COMPONENT /DEV ICE 
MTTF  -  1010  HOURS 

NOT  FEASIBLE  TODAY 


•  SYSTEM  MUST  TOLERATE  FAULTS  AND  BE  MAINTAINED 


222 


)B  FAIL 


N 

SYSTEM  MTTF  _  v  aN-i 
DEVICE  MTTF  j 

j=R 


i 

a  o.t  ,  an  -  yi  C  k 
k»1 
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MAINTAINED  FAULT  TOLERANT  SYSTEM 


•  MTTF  •  -5—  +  /3  -  « 
MAINT  A 


~  10  tO  HOURS 


•MTTR 


EPAIR 


DEVICE  MTTF 
No.  OF  DEVICES 


•  ECONOMICS - ►MULTIFUNCTION  DEVICES 

•  MORE  COMPLEXITY 


*  =/o  "" 

ft  *  I  "  Itl 
J  o 


TOLERANCE  OF  DEFINITIONAL  FLAWS  SOFTWARE  PRIME  CULPRIT 


4 


( 


0 


<> 


NX 


1— k 


SYSTEM  FAILIRE 


D 


C 


1— k 


SYSTEM  FAILURE 


3 


TOLERANCE  OF  DEFINITIONAL  FLAWS 


SOFTWARE  PRIME  CULPRIT 


SYSTEM  FAILURE 


OBJECTIVE 

DEVELOPMENT  AND  SPECIFICATION  OF  AN  EMULATION  TECHNIQUE  FOR  GENERATING 
STATISTICALLY  SIGNIFICANT  QUANTITIES  OF  FAILURE  MODES  EFFECTS  DATA  OF 
HIGHLY  RELIABLE  COMPUTER  SYSTEMS 

JUSTIFICATION 

•  IN  HIGHLY  RELIABLE,  FAULT  TOLERANT  SYSTEMS  SYSTEM  FAILURE  MODES  DUE 
TO  DESIGN  FLAWS  BECOME  SIGNIFICANT  -  PERHAPS  DOMINANT 

•  CREDIBILITY  OF' ANALYTICAL  RELIABILITY  MODELS  IS  DEPENDENT  UPON  AMOUNT 
OF  DATA  FROM  WHICH  INPUT  PARAMETERS  ARE- DERIVED 

•  HIGH  RELIABILITY  <10‘*)  OF  SYSTEMS  BEING  ANALYZED  PRECLUDES  USE/LIFETIME 
TESTING  OF  ACTUAL  SYSTEMS  BECAUSE  OF  INORDINATELY  LONG  MTTF's 

•  NO  OTHER  MEANS  IDENTIFIED  TO  ACQUIRE  SUFFICIENT  DATA  FOR  THE  ABOVE. 


TECHNICAL  APPROACH 

•  DEVELOPMENT  OF  FAST  EMULATION  ALGORITHMS  CAPABLE  OF  SUPPORTING 

■  FAULT  INSERTION  .  * 

-  GATE  LOGIC  LEVEL 

-  HYBRID  LEVELS 

GATE/CHIP/REGISTER/INSTRUCTION  COMBINATIONS 

•  IMPLEMENTATION  OF  ALGORITHMS  IN  A  HORIZONTALLY  MICROPROGRAMMABLE 
COMPUTER  AS  AN  ALGORITHM  TEST  BED  WITH  OPERATIONS  SYSTEMS 

•  DEVELOPMENT  AND  SPECIFICATION  OF  NEEDED  SUPPORT  CAPABILITIES 

-  META  COMPILERS/ASSEMBLERS 

-  DATA  RECORDING  CAPABILITIES 
.  -  RUN  TIME  CONTROL  FUNCTIONS 

-  FAULT  TABLE  GENERATORS 

-  H/H  DESCRIPTION  TRANSLATOR 

-  ENVIRONMENT  SIMULATOR/ INTERFACING 

-  DATA  POST  PROCESSORS 
•  OPERATOR  GRAPHICS 
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PROCESS 


0-5^^ 

& 


a  n  . 

..xv.... 

0  0 

0  0  111 

0  0 

1  0  1 

0  0 

0  1  1 

1  1 

0  0 

Now 

State 


Prior 

State 


CONCEPTUAL  EMULATION  SCHEME 


0  00110000000 

V  00000011  000 

5  00001100000 

r  00000000110 

S  00  000000001 


#  OF  CORRECT  CYCLES  BEFORE  ERRONEOUS  DATA  GENERATED 


DIAGNOSTIC  EMULATION  APPLICATIONS 


DETERMINISTIC*. 

•  HARDWARE  LOGIC  DESIGN  ANALYSIS. 

•  SOFTWARE  DESIGN  ANALYSIS. 

•  SYSTEM  (H/W  &  S/W)  EFFICIENCY/MISMATCH  ANALYSIS. 

I  H/W/S/W/SYSTEM  FAILURE  MODES  &  EFFECTS  ANALYSIS 

I  SYSTEM  PERFORMANCE  ANALYSIS  IN  A  SIMULATED  MISSION 


DIAGNOSTIC  EMULATION  APPLICATIONS 


STATISTICAL: 

I  LATENT  FAULT  ANALYSIS  AND  MODELING. 

•  COVERAGE  DETERMINATION  AND  MODELING. 

•  TRANSIENT  FAULT  ANALYSIS. 
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DIGITAL  SYSTEM  HARDWARE  DESCRIPTION  TECHNIQUE  USED  IN  EMULATION 


by 

Mr.  Robert  M.  Thomas,  Jr. 


Langley  Research  Center 
National  Aeronautics  and  Space  Administration 


A  technique  to  translate  a  digital  circuit  description 
into  the  form  required  to  emulate  the  circuit  at  the  gate 
and  flip-flop  level  is  described.  This  technique,  imple¬ 
mented  as  computer  programs,  takes  as  input  a  description 
of  the  integrated  circuit  and  translates  the  description 
into  tables  for  the  emulation.  Integrated  circuit  descrip¬ 
tion  language  is  described. 
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&0K3MDIM  P40M  BLANK-MOT  FILMS 


FAULT 

GENERATOR 


OUTLINE 

•  HARDWARE  DESCRIPTION  LANGUAGE 

•  TRANSLATION 

•  FAULT  GENERATION  AND  INSERTION 


HARDWARE  DESCRIPTION  LANGUAGE 


SYS  1 1  MAI  II.  Rill  IS  I  OR  IXPRISSING  IIARHWARI  IOl.ll 
IN  A  FORM  USABLE  BY  THE  TRANSLATOR. 

SOURCE  OF  INFORMATION 

SCHEMATICS 

-  INTEGRATED  CIRCUIT  TYPES 

-  INTERCONNECTIONS 

-  NAMES  OF  EACH  IC 

INTEGRATED  CIRCUIT  DATA  SHEETS 

-  GATE/FLIP-FLOP  MODELS 

HARDWARE  DESCRIPTION  LANGUAGE 

LANGUAGE  ELEMENTS 

GATE  TYPES.-  AND,  OR,  NOT,  NAND,  NOR,  EXCLUSIVE  OR, 

EXCLUSIVE  NOR 

FLIP-FLOP  TYPES:  D,  J-K,  R-S,  T 

INTEGRATED  CIRCUIT 
IDENTIFIERS:  ALPHA-NUMERIC 


INTEGRATED  CIRCUIT 
CONNECTIONS:  PIN  TO  PIN 
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CHIP  DESCRIPTION 


$  CHIP  DEFINITION  $ 

TYPE  ! 

POWER  ! 

DESCRIPTION  ! 

UNUSED  PINS  ! 

FUNCTIONS  ! 

G-S  = 

G-A  = 

G-R  = 

G-C  = 

G-A'  = 

G-B'  = 

G-C'  = 

G-D  0  = 

G-D  )  = 

G-D  2  = 

G-D  3  = 

G-D  4  = 

G-D  5  = 

G-D  6  = 

G-D  7  = 

G-W  (P-6)  = 

G-Y  (P-5)  = 

END  CHIP  $ 


LATCHED  PARALLEL  TO  SERIAL  CONVERTER  SCHEMATIC 


CHIP  DESCRIPTION  FOR  74LS151 


■l  CHIP  DEFINITION  * 

TYPE  :  SN54LS151 

POWER  s  VCC  =  P-16.'  GHD  -  P-8 

DESCRIPTION  :  ONE  OF  EIGHT  DRTR  SELECTORS  MULTIPLEXERS. 
UNUSED  PINS  s  NONE  I 

FUNCTIONS  t 

G-S  =  NOT  CP-?> 

G-R  =  RND  <P- 1 1 >  I 

G-B  *  AND  <P- 1 0) 

G-C  =  AND  <P-9> 

G-R  =  NOT  <G-A> 

G-B  '  *  NOT  <GtB.» 

G-C"  =  NOT  <G-C> 

G-DO  *  RND<G-S»  P-4.  G-R  •  G-B'»  G-C') 

G-Dl  -  RNDCGrS.  P-3.  G-R.  G-B'.  G-C") 

6-D2  -  RNDCGks.  P-2.  6-fl'»  G-B.  G-C) 

G-D3  *  AND<G-S»  P-1.  G-R.  G-B.  G-C) 

G-D4  -  RND<G-S.  P-15.  G-R'.  G-B'.  G-C) 

G-D5  -  RNDtGLs.  P-14.  G-R.  G-B'.  G-C)  1 

G-D6  «  RNDCG-S.  P-13.  G-R  .  G-B.  G-C) 

G-D?  -  RND (G-S.  P-12.  G-fi.  G-B.  G-C) 

G-W <P-6)  «  NOR <G-DO» 6-D 1 . G-D2. G-D3* G-D4. G-D5. G-D6. G-D?) 
G-Y  <P-5)  ■  NOT  <.G-W) 

%  END  CHIP  % 


INTEGRATED  CIRCUIT  NAME  TABLE 


OUTPUT 

IC  1-2 
IC  1-5 
IC  1-6 
IC  1-9 
IC  1-12 
IC  1-15 
IC  1-16 
IC  1-19 
IC  2-5 
IC  3-M 
IC  3-13 
IC  3-12 


NAME 

K.JYPE 

IC  1 

74LS273 

IC  2 

74LS151 

IC  3 

74LS169 

INTEGRATED  CIRCUIT  CONNECTION  TABLE 


DESTINATION 

IC  2 -A 
IC  2-3 
IC  2-2 
IC  2-15 
IC  2-1A 
IC  2-13 
IC  2-12 

OUTPUT  CONNECTOR 
IC  2-11 
IC  2-10 
IC  2-9 


SIGNAL  NAME 
(OPTIONAL) 


SERIAL  DATA 


236 


TRANSLATION  PROCESS 


CIRCUIT 
DESCRIPTION 


TRANSLATOR 

EMULATION 
MATRIX 


TRANSLATION  PROCESS 


CONVERT  A  PSEUDO  ENGLISH  CIRCUIT  DESCRIPTION  TO  A 
PACKED  BINARY  ENCODED  FORM  REQUIRED  BY  THE  EMULATION 
ALGORITHM 


REJECT  DESCRIPTION  THAT  DOES  NOT  FOLLOW  PRECISELY 
THE  HARDWARE  DESCRIPTION  LANGUAGE  RULES 
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FAULT  GENERATION  AND  INSERTION 


FAULT  SELECTION 

-  MANUAL  -  SELECTED  BY  EXPERIMENTER 

-  AUTOMATIC  -  RANDOMLY  SELECTED 

FAULT  INSERTION 

-  MODIFY  EMULATION  MATRIX  TO  REFLECT 
FAULT 

FAULT  OCCURRENCE 

-  INFORMATION  TO  EMULATION  ALGORITHM 
AS  TO  WHEN  FAULT  OCCURS 


SUMMARY 

DEVELOPING  THE  TOOLS  TO  SUPPORT  GATE/FLIP-FLOP  LEVEL 
EMULATION  OF  DIGITAL  COMPUTERS 

-  HARDWARE  DESCRIPTION  LANGUAGE 

-  TRANSLATOR  PROGRAM 

-  FAULT  GENERATOR  PROGRAMS 
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THE  NEED  FOR  TRANSIENT  DATA  IN  A 
CARE  III  RELIABILITY  ANALYSIS 


by 


Mr.  Salvatore  J.  Bavuso 


Langley  Research  Center 
National  Aeronautics  and  Space  Administration 


The  recently  developed  CARE  III  (Computer-Aided  Reli¬ 
ability  Estimation)  computer  program  incorporates  a 
transient/intermittent  fault  model  that  is  mathematically 
accurate  in  contrast  to  many  existing  reliability  evaluator 
programs  which  employ  approximations  for  the  transient/ 
intermittent  model.  The  CARE  III  transient/intermittent 
model  will  be  discussed  and  compared  to  existing  approxi¬ 
mating  models.  Computational  complexity  arising  from  the 
use  of  the  CARE  HI  transient/intermittent  model  will  also 
be  addressed. 


/ 


OBJECTIVE: 


So  *  Xi  x2  Xj 

(All  channel* 
operational) 


ADVANCED  (SUABILITY  ASSESSMENT  TECHNIQUES 


DEVELOP  A  CAPABILITY  TO  ASSESS  THE  RELIABILITY  OF  ANY 
FAULT-TOLERANT  COMPUTER-BASED  SYSTEM,  INCLUDING 
EXECUTIVE  SOFTWARE 


Interprocessor  bus 


Triplex  computer  architecture. 


S1  '  X1  x2  x3  *  X1  X3  ♦  Xj  X2  X3 
(Two  out  of  three  channels  operational) 


(Systea  failure) 

Markov  state  space  model  of  triplex  channel  RCS. 
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P0(t  ♦  At)  -  P0(t)  -  aACjAtPjjCt)  -  3A(1  -  C,)AtP0(t) 


lira 

At-0 


P0<,  .  «>  -  P0(t)  B 

- _  ■  gj  "■'o'1' 


dpn(o 

-5 - 

dP.(t) 

—5—  -  3xCjP0(t)  -  ixPj(t) 
iiCjP^o  -  xpjd) 

dp.(t) 

-  SX(1  -  Ci)P0(t)  ♦  2X(1  -  C3)Pj(t)  +  XP2( t) 

■where  Pq  Is  the  probability  oi  the  system  being  in  state  Sg,  that  Is 

*0mPN  Pl-P(Sl)P2-P(S^P3“P^ 
and  the  initial  conditions  are 

P0(0)  -  1  •  Pj( 0)  -  p«(0)  -  P3(q  -  0 


p0W  * 8-3x1 

Pj(t)  »  SC^e*2*1  -  e-3*1) 

P2(t)  -  3C1C2fe'At  -  2e'2xt  ♦e‘3xt) 
p3(t)  -  1  -  [P0(t>  ♦  PjU)  ♦  P2(tj] 
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CMS.  DELETE  R/A  AND  ILS 


- Near-Term  ARCS  Dependency  Tree 
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Delineation  of  hardware  and  software  anomalies 


NUMBER  OF  STATES  NFFDF.Pi  FOR  A  MARKOV  MODEL 


LET:  n  -  NUMBER  OF  "COUPLED*  STAGES 

NUMBER  OF  POSSIBLE  FAULT  TYPES  IN  lTH  STAGE 
i1-  NUMBER  OF  POSSIBLE  FAULT  STATES/TYPt  IN  f  TH  STAGE 

. .  ■<  .•••  •••.!  •*»**  H  •  1  •*  1  1** 

n1-  NUMBER  OF  MODULE  FAILURES  THAT  CAN  BE  TOLERATED 
IN  THE  lTH  STAGE 

Then  number  of  ststeh  states  N  is 

-,uir ;-)] 

B.g. ,  if  n  -  4  and  -  2,  -  3,  »4  -  »  for  all  1,  M  -  «14,«5G 

n 

CARE  III  N  ■  2  n  (mi  +  1)  *  162 
i  -  1 

CARE  III  APPROACH 

•  DEFINE  SYSTEM  STATE  ONLY  IN  TERMS  OF 
NUMBER  OF  EXISTING  FAULTS 

•  INDEPENDENTLY  EVALUATE  TRANSITION  PARAMETERS  _ _ 

AS  A  FUNCTION  OF  DISTRIBUTION  OF  POSSIBLE 

FAULT  TYPES  AND  STATES 

•  DETERMINE  RELIABILITY  USING  KOLMOGOROV'S 
FORWARD  DIFFERENTIAL  EQUATIONS 

•  HUMBER  OF  STATES  DRASTICALLY  REDUCED; 

TRANSITION  RATES  NECESSARILY  TIME-DEPENDENT  81 


ii+jin 
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COMPUTER  AIDED  RELIABILITY  ESTIMATION 
(CARE  III! 
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SYSTEM  DESIGN 
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i  ELECTRONIC 
i  HYDRAULIC 
•  MECHANICAL 


CYBER  175 
■j  CLASS 

'computer 


•FLTTYP  DEL-3. 6E2,CL4Wr-T,D»LDF-S.0E-8.(X*’UrT-T* 

•STAGES  NSTOES-a.M-ie.B,f1-a.B,  IRLPCD-4 , RLPLOT-T* 

•FLTCAT  MTCrtTS-2»l.  JTVPd.l  )-t .  JTVP(i.Z)-l. 
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SIFT1  FAULT-TREE  7-1-81 
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SYSTEM  FAILS  IF  STAGE 
1  OR  2  FAILS  OR  A 
CRITICAL  FAULT  PAIR 
OCCURS. 


SYSTEM  TREE 


COMPUTER 

V 

STAGE 

2/10 

T 

2  :  :  5  BUS  FORM 
A  CRITICAL  PAIR 
CAUSES  A  SYSTEM  FAILURE 


Grx 


FAULT  MODEL 


CRITICAL  PAIR  FAULT  TREE 


PERMANENT,  TRANSIENT/INTERMITTENT  FAULT  ANALOG 


LOGICAL  FAULT  MODEL 
AFTER  FAULT  ARRIVAL 


PERMANENT  FAULT 


S-A-l/S-A-0 

DETERMINISTIC:  Tp  <  t  <  - 


TRANSIENT/INTERMITTENT  FAULT 
S-A-l/S-A-0 

STOCHASTIC  t  FOR  DURATION  OF 
S-A-l  AND  S-a-0 
EXPONENTIAL:  m)  ■  ae 


FAULT  ARRIVAL  MODEL 


WEIBULL:  f(t)  =  wu"_1e"*tw 
EXPONENTIAL:  f(t)  -  xe*u 


TRANSIENT  AND  PERMANENT  FAULTS 
CONVENTIONAL  MARKOV  MODEL 
2-UNIT  SYSTEM 


xp  =  PERMANENT  FAILURE  RATE  (ARRIVAL  RATE) 
xT  =  TRANSIENT  RATE  (ARRIVAL  RATE) 

i  «  PROPORTION  OF  TRANSIENTS  THAT  ARE  MISTAKEN  FOR  PERMANENT  FAILURES 


l-  ( 2 x n ♦  i*  2xT)&t 


l  -  (xp  +  1  -Xr )tt 


( 2XP  +  1  ■  2Xy ) A t 
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Overall  reliability  model  of  two-unit  system. 


Aggregated  reliability  model  for  a  two-unit  system. 

.  System  states  defined  by  number  of  failed  modules 
of  each  type 

.  Transition  rates  determined  by  averaging  overall 
failure  types  and  states 


